Lead Information Security Analyst, ITC

About the role

The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.

What you'll do

• You coach Seniors and Analysts, serve as the trusted delivery lead for the ITC Principal and Director
• You own one or more workstreams end-to-end in the stream where demand is highest (Governance, Risk, Compliance, or Technical Recovery)
• You drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations, and governance forum cadence
• You drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments, and DR/BCP exercise support
• You provide direction and mentorship to Senior and Analyst GRC Athletes on the workstream—unblocking issues, reviewing artifacts, and enforcing a quality bar

What you need

• 7–13 years in cybersecurity
• ISO 27001
• Compliance
• ServiceNow
• SOX
• Internal audit
• Any graduate

Good to have

• CISA
• CISM
• CISSP