Sporting Fashion & Goods
Principal Information Security Analyst, ITC
Mid Level
Karnataka, India
in office
Full time
Finance & LegalGovernance & Risk
Job description
About the Role
This role is the top GRC individual contributor and senior anchor at Nike's India Technology Centre (ITC), reporting to the ITC GRC Director. It partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, Legal, and Finance to advance Nike's global GRC agenda. The role extends Global GRC standards into local execution while rotating as a Principal GRC Athlete across Governance, Risk, Compliance, and Technical Recovery.
Key Responsibilities
- Lead the primary GRC stream at ITC, rotating across Governance, Risk, Compliance, or Technical Recovery based on demand, and provide senior technical coverage across the other streams.
- Partner with the Global GRC Principal on operating-model design.
- Translate global GRC standards, policies, and platform designs into ITC-executable playbooks, workflows, and control patterns, and recommend improvements back to Global GRC.
- Govern end-to-end risk lifecycle quality and enterprise risk register posture for ITC-supported risks.
- Steward policies, standards, exceptions, attestations, and governance forums.
- Provide senior direction on SOX ITGC, cybersecurity risk assessments, third-party cyber risk, and DR/BCP resilience for global initiatives and platforms supported from ITC.
- Serve as the ITC power user and design partner for ServiceNow GRC, driving workflow improvements, control library hygiene, attestations, dashboards, and adoption across distributed owners.
- Coach and mentor Leads, Seniors, and Analysts at ITC and role-model the “own / govern / enable” judgment that raises the technical bar of the team.
- Represent ITC in global governance forums, surfacing themes early, aligning priorities, and enabling timely enterprise risk decisions.
Required Experience & Qualifications
- 10+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in large, matrixed, multinational technology organisations.
- Bachelor's degree or equivalent combination of education, experience, or training.
- Deep, broadly applied GRC expertise across Governance, Risk, Compliance, and Technical Recovery.
- Maturity to operate as a Principal GRC Athlete—discipline lead for ITC on a rotating stream while providing thought leadership across all four streams.
- Recognized subject-matter expert who is comfortable with novel and ambiguous problems and who develops new concepts, playbooks, and standards that scale globally.
- Ability to influence senior leaders across a highly matrixed environment without direct authority.
- Ability to coach Leads, Seniors, and Analysts and set the technical direction for how work gets done at ITC.
- Strong command of SOX ITGC, cybersecurity regulations, NIST CSF and ISO 27001, third-party cyber risk, cybersecurity risk assessments, DR/BCP resilience, ServiceNow GRC, and enterprise risk lifecycle discipline.
- Strong hands-on experience with ServiceNow GRC (or comparable platform).
- Demonstrated hands-on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery).
- Thrives on closing loops with evidence, not activity.
Preferred Skills
- Advanced degree or professional certifications strongly preferred (e.g., CISSP, CISM, CRISC, CISA, GRCP, ISO 27001 LA/LI).
Create your account to access job details
Unlock full job descriptions, apply in seconds, and get access to roles matched to your experience and interests.
