Vacancy description

Principal Information Security Analyst, ITC in भारत

Nike

  • Full-timeStandard weekly hours

भारत

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU’LL WORK WITH

The Principal GRC Information Security Analyst 5 is the top GRC individual contributor at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, Legal, and Finance to advance Nike's global GRC agenda.

WHO WE ARE LOOKING FOR

The candidate needs to have deep, broadly applied GRC expertise across Governance, Risk, Compliance, and Technical Recovery, and the maturity to operate as a Principal GRC Athlete—the discipline lead for ITC on a rotating stream while providing thought leadership across all four streams. This is the senior anchor role at ITC and requires a recognized subject-matter expert who is comfortable with novel and ambiguous problems and who develops new concepts, playbooks, and standards that scale globally. The candidate influences senior leaders across a highly matrixed environment without direct authority, coaches Leads, Seniors, and Analysts, and sets the technical direction for how work gets done at ITC. Strong command of SOX ITGC, cybersecurity regulations, NIST CSF and ISO 27001, third-party cyber risk, cybersecurity risk assessments, DR/BCP resilience, ServiceNow GRC, and enterprise risk lifecycle discipline is essential. The candidate thrives on closing loops with evidence, not activity.

  • 10+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in large, matrixed, multinational technology organizations

  • Bachelor’s degree or equivalent combination of education, experience, or training

  • Advanced degree or professional certifications strongly preferred (e.g., CISSP, CISM, CRISC, CISA, GRCP, ISO 27001 LA/LI)

  • Strong hands-on experience with ServiceNow GRC (or comparable platform)

  • Demonstrated hands-on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery)

WHAT YOU’LL WORK ON

You serve as the top GRC individual contributor at ITC, extending Global GRC standards into local execution while rotating as a Principal GRC Athlete across Governance, Risk, Compliance, and Technical Recovery. You lead the most complex problems, coach the ITC GRC team, and represent ITC in global forums.

  • You lead the primary GRC stream at ITC (rotates across Governance, Risk, Compliance, or Technical Recovery based on demand) and provide senior technical coverage across the other streams, partnering with the Global GRC Principal on operating-model design

  • You translate global GRC standards, policies, and platform designs into ITC-executable playbooks, workflows, and control patterns, and recommend improvements back to Global GRC

  • You govern end-to-end risk lifecycle quality and enterprise risk register posture for ITC-supported risks; you steward policies, standards, exceptions, attestations, and governance forums

  • You provide senior direction on SOX ITGC, cybersecurity risk assessments, third-party cyber risk, and DR/BCP resilience for global initiatives and platforms supported from ITC

  • You serve as the ITC power user and design partner for ServiceNow GRC—driving workflow improvements, control library hygiene, attestations, dashboards, and adoption across distributed owners

  • You coach and mentor Leads, Seniors, and Analysts at ITC and role-model the “own / govern / enable” judgment that raises the technical bar of the team

  • You represent ITC in global governance forums—surfacing themes early, aligning priorities, and enabling timely enterprise risk decisions

NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development. No matter the location, or the role, every Nike employee shares one galvanizing mission: To bring inspiration and innovation to every athlete* in the world.

NIKE, Inc. is an equal opportunity employer. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

Similar vacancies

More like this role

  • Hybrid
  • On-site
  • Full-time
  • Cybersecurity
  • Auditing
... love to meet you. Role location: Pune - Hybrid (three days in-office, two days virtual) About the role As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and ...

Pune, भारत

  • Data Analytics
... Senior Security Business Analyst role within the Enterprise Security Program is essential for supporting security initiatives by ensuring that business and security requirements are accurately captured, documented, communicated, and managed. The role partners with project stakeholders and Information Security Services to ...

Bangalore, भारत

  • Contract
  • Risk Management
... the organization. Must-Haves - Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance. - IT Risk Knowledge: Strong understanding of internal IT general controls (ITGC), access control, disaster recovery, cloud security concepts, ...

Bangalore, भारत

  • Full-time
  • Cybersecurity
Senior Security Engineer, ITC WHO WE ARE LOOKING FOR As our Senior SAP Application Security Engineer in NIKE ITC, your role on the team will be to lead the execution of a compelling and competitive application security strategy and drive engineering best practice tasks. This is a critical role within the organization that ...

भारत

  • Full-time
  • Cybersecurity

€6515 EUR

... billion, and has been among the best performing stocks in Europe over the past 20 years. Job Description As part of the Threat Hunting function within Eurofins Information Security, you will lead proactive detection of advanced threats by actively searching for adversaries that evade traditional security controls. This role ...

Bangalore, भारत

  • Hybrid
  • Full-time
  • Cybersecurity
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Lead Information Security Analyst (SAP Security) based in India. Take the next step in your cybersecurity career by helping secure complex, business-critical SAP environments within a ...

भारत

Pylon Management Consulting

Director - Information Security

  • Hybrid
  • Contract
... and automate repetitive controls while retaining appropriate human oversight for high-impact decisions.- Improve Mean Time to Detect, Mean Time to Respond, analyst productivity, investigation quality, and incident-handling consistency.- Ensure that automation and AI capabilities are implemented with security, privacy, ...

Bombay, भारत

... patterns, and guardrails for use by engineering and development teams; socialize and evangelize standards across technology organizations. - Partner with other security analysts and engineers to ensure architectures are informed by threat actor TTPs and emerging attack vectors. - Collaborate with the Security Enablement team ...

Hyderabad, भारत

  • Full-time
... experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline. - Strong written ...

Bombay, भारत

  • Full-time
... experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline. - Strong written ...

Bombay, भारत

  • Full-time
  • Cybersecurity

Rs 20 - 40 lakhs p.a.

... interest in developing AI-powered security workflows. - Security-related projects on GitHub, technical blogs, or other contributions demonstrating practical security expertise. Experience and Ideal Candidate Profile Experience: 2–6 years in Information Security, Cloud Security, Infrastructure Security, or a related domain. ...

Bangalore, भारत