The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.
WHO WE ARE LOOKING FORThe candidate needs to have advanced GRC delivery experience and the versatility to operate as a Lead GRC Athlete—running workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery, and rotating between them without re-hiring. This is a workstream ownership role that requires in-depth knowledge, conceptual thinking, and the credibility to work with Principals globally. The candidate provides direction and mentorship to Seniors and Analysts, advises the team on complex matters, and foresees most future implications of the solutions they implement. Solid working knowledge of SOX ITGC, NIST CSF and ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices, and ServiceNow GRC is essential. The candidate closes loops with artifacts and evidence and knows when to execute, when to govern, and when to escalate.
7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed, multinational technology organizations
Bachelor’s degree or equivalent combination of education, experience, or training
Professional certifications strongly preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI)
Hands-on experience with ServiceNow GRC (or comparable platform)
Demonstrated hands-on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery)
You run GRC workstreams as a Lead GRC Athlete across Governance, Risk, Compliance, and Technical Recovery. You coach Seniors and Analysts, serve as the trusted delivery lead for the ITC Principal and Director, and partner across the global GRC organization to deliver outcomes at ITC.
You own one or more workstreams end-to-end in the stream where demand is highest (Governance, Risk, Compliance, or Technical Recovery), rotating based on the stream with the longest queue
You drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations, and governance forum cadence
You drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments, and DR/BCP exercise support
You provide direction and mentorship to Senior and Analyst GRC Athletes on the workstream—unblocking issues, reviewing artifacts, and enforcing a quality bar
You produce and interpret workstream metrics (control effectiveness, risk closure, TPRM cycle time, DR test outcomes) for Directors and Principals and recommend improvements
You build strong working relationships with control owners, engineers, vendors, and cross-functional partners; you navigate ambiguity and competing priorities
You identify recurring pain points, propose changes, and implement improvements with an eye to future implications for the global program
Skills Required
- 7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed multinational technology organizations
- Bachelor’s degree or equivalent combination of education, experience, or training
- Hands-on experience with ServiceNow GRC or a comparable platform
- Demonstrated hands-on delivery across at least two GRC streams: Governance, Risk, Compliance, or Technical Recovery
- Professional certification such as CISA, CRISC, CISM, CISSP, GRCP, or ISO 27001 LA/LI
Nike Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Nike and has not been reviewed or approved by Nike.
-
Retirement Support — A 401(k) with a company match is complemented by options such as a Mega Backdoor Roth and deferred compensation for eligible earners. Financial coaching and structured savings programs support long-term financial security.
-
Equity Value & Accessibility — An Employee Stock Purchase Plan with a stock discount sits alongside broad-based equity vehicles like RSUs and non-qualified stock options. These avenues expand wealth-building opportunities beyond base pay.
-
Parental & Family Support — Paid parental leave includes maternity and paternity time, recently expanded in the U.S. to 16 weeks and extended to part-time retail teammates. Additional supports include childcare assistance at select locations and family-building benefits such as fertility, surrogacy, and adoption.
Nike Insights
What We Do
At NIKE, Inc., we innovate to serve athletes*. Every teammate - from coder to creator - plays a role in making these athletes’ dreams real. Our tech, data, and digital teams push limits every day, building the future of sport and the tools that drive it. Here, curiosity is fuel. Innovation is the game plan. Different perspectives keep us on the offense. You’ll solve challenges worth tackling, grow fast and belong to a team that backs you to do the right thing. Bring your drive. Bring your bold. Let’s move the world, together. Take your first step at nike.com/careers * If you have a body, you’re an athlete.
Why Work With Us
At NIKE, Inc., your dedication fuels the future of sport. There is a sense of pride that comes from representing an iconic brand and shaping its future. Here, we treat every day as a new opportunity to push boundaries, ask tough questions and share whole-hearted convictions. We are a team – united by the belief that anything is possible.
Gallery
.jpeg)
