Back to list

Vacancy description

Lead Information Security Analyst, ITC in भारत

Nike

भारत

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU’LL WORK WITH

The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.

WHO WE ARE LOOKING FOR

The candidate needs to have advanced GRC delivery experience and the versatility to operate as a Lead GRC Athlete—running workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery, and rotating between them without re-hiring. This is a workstream ownership role that requires in-depth knowledge, conceptual thinking, and the credibility to work with Principals globally. The candidate provides direction and mentorship to Seniors and Analysts, advises the team on complex matters, and foresees most future implications of the solutions they implement. Solid working knowledge of SOX ITGC, NIST CSF and ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices, and ServiceNow GRC is essential. The candidate closes loops with artifacts and evidence and knows when to execute, when to govern, and when to escalate.

  • 7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed, multinational technology organizations

  • Bachelor’s degree or equivalent combination of education, experience, or training

  • Professional certifications strongly preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI)

  • Hands-on experience with ServiceNow GRC (or comparable platform)

  • Demonstrated hands-on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery)

WHAT YOU’LL WORK ON

You run GRC workstreams as a Lead GRC Athlete across Governance, Risk, Compliance, and Technical Recovery. You coach Seniors and Analysts, serve as the trusted delivery lead for the ITC Principal and Director, and partner across the global GRC organization to deliver outcomes at ITC.

  • You own one or more workstreams end-to-end in the stream where demand is highest (Governance, Risk, Compliance, or Technical Recovery), rotating based on the stream with the longest queue

  • You drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations, and governance forum cadence

  • You drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments, and DR/BCP exercise support

  • You provide direction and mentorship to Senior and Analyst GRC Athletes on the workstream—unblocking issues, reviewing artifacts, and enforcing a quality bar

  • You produce and interpret workstream metrics (control effectiveness, risk closure, TPRM cycle time, DR test outcomes) for Directors and Principals and recommend improvements

  • You build strong working relationships with control owners, engineers, vendors, and cross-functional partners; you navigate ambiguity and competing priorities

  • You identify recurring pain points, propose changes, and implement improvements with an eye to future implications for the global program

NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development. No matter the location, or the role, every Nike employee shares one galvanizing mission: To bring inspiration and innovation to every athlete* in the world.

NIKE, Inc. is an equal opportunity employer. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

Similar vacancies

More like this role

  • Hybrid
  • On-site
  • Full-time
  • Cybersecurity
  • Auditing
... love to meet you. Role location: Pune - Hybrid (three days in-office, two days virtual) About the role As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and ...

Pune, भारत

  • Hybrid
  • Full-time
... information security, Cybersecurity, Computer Science or a related discipline, or equivalent practical experience. - Substantial experience in information security operations, including hands-on involvement in DLP alert monitoring and incident investigation. - Experience leading or coordinating an operational security ...

Noida, भारत

  • Full-time
  • Cybersecurity
... Inc. 5000 list of fastest-growing American companies since 2008. As an Information Security Analyst at Smarsh, you will be responsible for evaluating the cybersecurity and third-party risk posture of our clients within highly regulated industries. Utilizing our advanced Vendor Risk Management (VRM) and Cybersecurity Compliance ...

Bangalore, भारत

  • Contract
  • Risk Management
... the organization. Must-Haves - Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance. - IT Risk Knowledge: Strong understanding of internal IT general controls (ITGC), access control, disaster recovery, cloud security concepts, ...

Bangalore, भारत

Job Summary:We are seeking a skilled cybersecurity leader to strengthen the organization's information security posture, manage technology risks, and implement enterprise-wide security controls. The ideal candidate will have experience in security governance, cloud security, threat management, and regulatory compliance, ...

Bombay, भारत

Overview The Information Security Lead is a key member of the Business Information Security Office, serving as a trusted security advisor and change agent, enabling secure digital transformation across multiple enterprise business domains (e.g., Supply Chain & Operations, Consumer & Commercial, Finance, HR, Enterprise Platforms). ...

Hyderabad, भारत

  • Full-time
  • Cybersecurity
Senior Security Engineer, ITC WHO WE ARE LOOKING FOR As our Senior SAP Application Security Engineer in NIKE ITC, your role on the team will be to lead the execution of a compelling and competitive application security strategy and drive engineering best practice tasks. This is a critical role within the organization that ...

भारत

  • Full-time
  • Cybersecurity

€6515 EUR

... billion, and has been among the best performing stocks in Europe over the past 20 years. Job Description As part of the Threat Hunting function within Eurofins Information Security, you will lead proactive detection of advanced threats by actively searching for adversaries that evade traditional security controls. This role ...

Bangalore, भारत

Pylon Management Consulting

Director - Information Security

  • Hybrid
  • Contract
... obligations.- Support ongoing cyber-risk monitoring for critical suppliers and services within Tata Digital's https://jobeax.com/link/QzdESXynd9u9bDM5 and Capability Leadership : - Lead and develop a multidisciplinary team comprising SOC analysts, incident responders, threat hunters, security engineers, and vulnerability management ...

Bombay, भारत

... patterns, and guardrails for use by engineering and development teams; socialize and evangelize standards across technology organizations. - Partner with other security analysts and engineers to ensure architectures are informed by threat actor TTPs and emerging attack vectors. - Collaborate with the Security Enablement team ...

Hyderabad, भारत

  • Full-time
... experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline. - Strong written ...

Bombay, भारत