Senior Cyber GRC Specialist

R.L. Polk Private Limited; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive compensation

Health and wellness benefits

Retirement savings plan

Job summary

Mobility Global is seeking a Senior Cyber GRC Specialist to join the global GRC team. You will assess cybersecurity risks from third-party relationships, review security evidence, and translate technical risk into business impact.

You will collaborate with Security, Technology, Procurement, Legal, Privacy, and other teams to drive risk-based decisions. You will apply risk assessment depth based on service criticality and data sensitivity, maintain risk records, and support audits and

Qualifications

• 5–10 years of cybersecurity or related risk management experience.
• Experience in vendor and cloud service security assessments.
• Familiarity with ISO 27001, NIST CSF, or similar frameworks.
• Professional certifications such as CISSP, CISM, CRISC preferred.

Responsibilities

• Assess and manage cybersecurity risks from third-party relationships.
• Review security questionnaires, reports, and evidence.
• Provide risk-based recommendations and track remediation actions.
• Collaborate with Security, IT, Legal, Procurement, and Audit teams.
• Maintain risk records and report on metrics.

Skills

Cybersecurity risk

Vendor risk management

Security assessments

Policy and standards

Tools

ServiceNow

Archer

OneTrust

LogicGate

Job description

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we're creating new opportunities for our customers, our business, and our people.

The Team

A global Cyber Governance, Risk & Compliance (GRC) team that is responsible for managing cyber risk, driving policy adherence, enabling compliance, supporting customer trust initiatives, and delivering enterprise-wide governance processes. The team partners across IT, Security, Legal, Risk, Privacy, Sales, and Business functions to deliver integrated risk management and assurance capabilities.

Responsibilities and Impact

The Senior Cyber GRC Specialist is an individual contributor responsible for assessing and managing cybersecurity risks arising from third-party relationships and deviations from approved security policies and standards. The role serves as a technical risk advisor across Security, Technology, Procurement, Legal, Privacy, and business teams. This position requires practical cybersecurity knowledge to review technical controls, ask appropriate follow-up questions, challenge incomplete or unsupported responses, evaluate compensating controls, and translate technical risk into clear business impact. The role assesses risk and provides recommendations; formal risk acceptance remains with the authorized business and security approvers. Perform risk-based cybersecurity assessments of vendors, suppliers, SaaS providers, cloud service providers, and other third parties during onboarding, reassessment, renewal, and material service changes. Review security questionnaires, independent assurance reports, certifications, penetration test summaries, architecture information, vulnerability management practices, incident response capabilities, and other relevant security evidence. Engage vendor and internal technical teams to clarify security architecture, control design, identified gaps, remediation commitments, and residual risk. Identify and document third-party cyber risks, determine risk severity, recommend risk treatment, and track agreed remediation actions through closure. Apply assessment depth based on service criticality, data sensitivity, connectivity, hosting model, regulatory exposure, and potential business impact. Administer the security exception management lifecycle, including intake, completeness review, risk assessment, routing, approval coordination, expiration, renewal, closure, and reporting. Evaluate exception requests against applicable security policies and standards, including the business justification, scope, duration, technical exposure, compensating controls, remediation plan, and residual risk. Challenge exception submissions when risks are not adequately understood, supporting evidence is insufficient, or proposed compensating controls do not reasonably reduce exposure. Partner with Security Architecture, Cloud Security, Application Security, Infrastructure, Identity and Access Management, Vulnerability Management, and other subject matter experts when specialized validation is required. Prepare clear risk recommendations for authorized approvers and governance forums while maintaining appropriate separation between risk assessment, risk ownership, and risk acceptance. Maintain accurate risk records and supporting evidence in the designated governance, risk, and compliance platform. Develop and report metrics on assessment volume, risk severity, remediation status, overdue actions, exception aging, renewals, expirations, and risk concentrations. Identify recurring control gaps and trends across vendors and exceptions and recommend improvements to policies, standards, assessment criteria, contract requirements, and governance processes. Support audits, certifications, regulatory inquiries, and customer assurance activities related to third-party cyber risk and security exception management. Contribute to continuous improvement of risk methodologies, procedures, templates, decision criteria, and stakeholder guidance. This role would report to the Senior Manager, Cyber Governance & Risk Management.

What We're Looking For

5 -10 years of experience in cybersecurity, information security risk, technology risk, third-party risk management, security architecture, security engineering, or a related discipline. Demonstrated experience performing technical security assessments of vendors, cloud services, applications, infrastructure, or enterprise technology environments. Experience evaluating policy or control exceptions, compensating controls, remediation plans, and residual risk is strongly preferred. Working knowledge of identity and access management, multifactor authentication, privileged access, cloud security, network security, vulnerability management, endpoint protection, application security, encryption, logging and monitoring, incident response, resilience, and data protection. Ability to interpret common security evidence, including SOC reports, ISO 27001 certifications, penetration test summaries, vulnerability information, security architecture documentation, and control descriptions. Working knowledge of recognized cybersecurity and risk frameworks, such as ISO 27001, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, and TISAX. Strong analytical judgment with the ability to distinguish administrative gaps from material technical risk and to evaluate whether proposed controls adequately reduce exposure. Ability to communicate clearly with technical teams, vendors, business owners, procurement, legal, privacy, auditors, and senior stakeholders. Strong documentation, organization, and follow-through skills, with the ability to manage multiple assessments, exceptions, and remediation actions concurrently. Ability to operate independently, escalation material concerns appropriately, and provide objective, evidence-based risk recommendations.

Preferred Qualifications

Professional certification such as CISSP, CISM, CRISC, CCSK, CCSP, Security+, or an equivalent credential. Experience with a governance, risk, and compliance platform or third-party risk management solution, such as ServiceNow, Archer, LogicGate, OneTrust, or a comparable platform. Experience supporting ISO 27001, SOC 2, TISAX, customer assurance, regulatory compliance, or audit activities. Prior technical experience in security engineering, security architecture, cloud security, vulnerability management, incident response, or a security operations function.

What’s In It for You

Competitive compensation package, including base salary and incentive opportunities where applicable.

• Comprehensive health and wellness benefits for employees and eligible dependents.
• Retirement savings programs, including company matching contributions where available.

Equal Opportunity Employer

Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.

Additional Information

Mobility delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead. As part of our team, you’ll help solve complex challenges that equip businesses, governments and individuals with the knowledge to adapt to a changing economic landscape.