Lead Information Security Analyst, ITC

The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.

The candidate needs to have advanced GRC delivery experience and the versatility to operate as a Lead GRC Athlete—running workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery, and rotating between them without re-hiring. This is a workstream ownership role that requires in-depth knowledge, conceptual thinking, and the credibility to work with Principals globally. The candidate provides direction and mentorship to Seniors and Analysts, advises the team on complex matters, and foresees most future implications of the solutions they implement. Solid working knowledge of SOX ITGC, NIST CSF and ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices, and ServiceNow GRC is essential. The candidate closes loops with artifacts and evidence and knows when to execute, when to govern, and when to escalate.

7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed, multinational technology organizations

Bachelor’s degree or equivalent combination of education, experience, or training

Professional certifications strongly preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI)

Hands-on experience with ServiceNow GRC (or comparable platform)

Demonstrated hands-on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery)