Senior GRC Engineer

JioStar; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

JioStar is seeking a motivated GRC Specialist to join its GRC team, bringing 3+ years in governance, risk and compliance, with a passion for automation, AI integrations, and tool evaluation. You will help strengthen the company’s security, privacy and regulatory posture by leveraging technology, automation and innovative solutions across functions.

This role offers exposure to audits, control assessments and cross‑functional collaboration with legal, security and business teams.

Qualifications

• 3+ years of experience in GRC, cybersecurity, risk or privacy functions.
• Hands-on experience with GRC or security tools.
• Strong knowledge of compliance frameworks (ISO 27001, DPDPA, GDPR, PCI DSS).
• Experience with automation and AI adoption within GRC.
• Excellent communication and stakeholder collaboration skills.

Responsibilities

• Design, implement and monitor GRC frameworks across Jiostar entities.
• Assist in audits, risk assessments and closure of findings.
• Collaborate with privacy, legal and security teams for regulatory compliance.
• Lead tool evaluations, PoCs, and end-to-end implementation.

Job description

About the Role: We are looking for a highly motivated and skilled GRC Specialist to join Jiostar’s GRC team. This role is ideal for someone with 3+ years of experience in Governance, Risk & Compliance, who has a passion for automation, AI integrations, tool evaluation, and implementation. The candidate will play a key role in strengthening Jiostar’s security, privacy, and compliance posture by leveraging technology, automation, and innovative solutions.

About Us: Perched firmly at the nucleus of spellbinding content and innovative technology, JioStar is a leading global media & entertainment company that is reimagining the way audiences consume entertainment and sports. Its television network and streaming service together reach more than 750 million viewers every week, igniting the dreams and aspirations of hundreds of million people across geographies.

JioStar is an equal opportunity employer. The company values diversity and its mission is to create a workplace where everyone can bring their authentic selves to work. The company ensures that the work environment is free from any discrimination against persons with disabilities, gender, gender identity and any other characteristics or status that is legally protected.

Key Responsibilities

Governance, Risk & Compliance

• Support the design, implementation, and monitoring of GRC frameworks across Jiostar entities.
• Assist in internal and external audits, risk assessments, and closure of findings.

Privacy & Security

• Work closely with privacy, legal, and security teams to ensure data protection and regulatory compliance (DPDPA, GDPR, PIPEDA, etc.).
• Contribute to privacy impact assessments, data retention reviews, and security control validations.

Tool Evaluation & Implementation

• Assess, compare, and recommend GRC, privacy, and security tools aligned with business needs.
• Lead proof‑of‑concept, vendor evaluations, and end‑to‑end implementation.

Automation & AI Integration

• Identify opportunities to automate repetitive GRC processes (e.g., audit evidence management, risk tracking, TPRM).
• Integrate AI‑driven solutions for compliance monitoring, reporting, and risk analytics.

Stakeholder Engagement & Collaboration

• Interact with stakeholders across functions to present findings, progress, and outcomes of GRC initiatives.
• Collaborate with legal, security, and business teams to drive cross‑functional initiatives and ensure alignment with compliance and privacy objectives.

Preferred Education and Experience

• 3+ years of relevant experience in GRC, cybersecurity, risk, or privacy functions.
• Bachelor’s or Master’s degree in Computer Science or a related field.

Skills and Attributes for Success

• Hands‑on experience with GRC or security tools (e.g., JIRA, Vanta, Smartsheet).
• Strong understanding of compliance frameworks and standards (ISO 27001, DPDPA, GDPR, PCI DSS).
• Proven ability to evaluate tools, run PoCs, and manage implementation projects.
• Experience with automation (workflows, integrations) and interest in AI adoption within GRC.
• Knowledge of privacy and data protection regulations and ability to apply them practically.
• Excellent communication skills and ability to present to and collaborate with diverse stakeholders.
• Exposure to cloud security (AWS/Azure/GCP) controls and compliance.
• Certifications (CISA, ISO 27001 LA/LI, CIPM, CCSK, etc.) are a plus.