Lead Information Security Analyst, ITC

About the role

Nike is hiring a Lead GRC Information Security Analyst for its India Technology Center (ITC) in Karnataka. The role is an advanced individual contributor and workstream owner on the GRC team, reporting to the ITC GRC Director and partnering with the Global GRC team in Beaverton, Oregon, as well as leaders in Global Technology, Internal Audit and Finance.

Key responsibilities

• Run GRC workstreams end-to-end across Governance, Risk, Compliance and Technical Recovery, rotating between them depending on demand and queue length
• Coach and mentor Senior and Analyst GRC staff, review artifacts and enforce a quality bar
• Drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations and governance forums
• Drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments and DR/BCP exercise support
• Produce and interpret workstream metrics such as control effectiveness, risk closure, TPRM cycle time and DR test outcomes, and recommend improvements
• Build relationships with control owners, engineers, vendors and cross-functional partners, and propose improvements to recurring pain points

Required profile

• 7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance or GRC in matrixed, multinational technology organizations
• Bachelor's degree or equivalent combination of education, experience or training
• Demonstrated hands-on delivery across at least two of the four GRC streams
• Professional certifications strongly preferred (e.g. CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI)

Required skills

• Solid working knowledge of SOX ITGC, NIST CSF and ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices and ServiceNow GRC
• Hands-on experience with ServiceNow GRC (or a comparable platform)