Lead Information Security Analyst, ITC

This is an advanced individual contributor and workstream owner role on the GRC team at Nike's India Technology Centre (ITC), reporting to the ITC GRC Director. The role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance. It runs GRC workstreams end-to-end as a Lead GRC Athlete across Governance, Risk, Compliance, and Technical Recovery, coaches Senior and Analyst GRC Athletes, and serves as a trusted delivery lead for the ITC Principal and Director.

• Run GRC workstreams end-to-end as a Lead GRC Athlete across Governance, Risk, Compliance, and Technical Recovery, owning one or more workstreams where demand is highest and rotating based on the stream with the longest queue.
• Drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations, and governance forum cadence.
• Drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments, and DR/BCP exercise support.
• Provide direction and mentorship to Senior and Analyst GRC Athletes on the workstream, unblocking issues, reviewing artefacts, and enforcing a quality bar.
• Produce and interpret workstream metrics (control effectiveness, risk closure, TPRM cycle time, DR test outcomes) for Directors and Principals and recommend improvements.
• Build strong working relationships with control owners, engineers, vendors, and cross-functional partners; navigate ambiguity and competing priorities.
• Identify recurring pain points, propose changes, and implement improvements with an eye to future implications for the global programme.
• Serve as the trusted delivery lead for the ITC Principal and Director, and partner across the global GRC organisation to deliver outcomes at ITC.

• 7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed, multinational technology organisations.
• Bachelor's degree or equivalent combination of education, experience, or training.
• Hands-on experience with ServiceNow GRC or a comparable platform.
• Demonstrated hands-on delivery across at least two of four GRC streams: Governance, Risk, Compliance, and Technical Recovery.
• Advanced GRC delivery experience and versatility to operate as a Lead GRC Athlete, running workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery and rotating between them without re-hiring.
• In-depth knowledge, conceptual thinking, and credibility to work with Principals globally.
• Ability to provide direction and mentorship to Seniors and Analysts, advise the team on complex matters, and foresee most future implications of implemented solutions.
• Solid working knowledge of SOX ITGC, NIST CSF, ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices, and ServiceNow GRC.
• Ability to close loops with artefacts and evidence, and to know when to execute, when to govern, and when to escalate.

• Professional certifications strongly preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI).

• Nike's India Technology Centre (ITC)