Lead - GRC

Key Responsibilities

Data Flow Mapping: Identify and document how data is collected, processed, stored, and shared across internal systems and platforms.

Third-Party Data Analysis: Evaluate data exchange practices with vendors, partners, and service providers to ensure alignment with security and compliance standards.

Documentation Development: Create and maintain comprehensive records of data usage, including diagrams, inventories, and usage logs.

Compliance Support: Assist in ensuring data practices meet regulatory requirements such as GDPR, DPDP, HIPAA, or ISO 27001.

Stakeholder Collaboration: Work closely with IT, Legal, Security, and Procurement teams to gather insights and validate documentation.

Risk Identification: Highlight potential data risks or inefficiencies in current processes and recommend mitigation strategies.

Audit Readiness: Prepare documentation and reports to support internal and external audits.

Qualifications

Bachelor's degree in computer science, Information Systems, Data Management, or related field.

10+ years of experience in data governance, documentation, or IT compliance roles.

Familiarity with data mapping tools (e.g., Collibra, BigID) and documentation platforms (e.g., Confluence, SharePoint).

Strong understanding of data privacy regulations and third-party risk management.

Excellent analytical, organizational, and communication skills.

Communication & Collaboration Skills

Stakeholder Engagement

Ability to work cross-functionally with IT, Legal, Security, and Procurement teams.

Technical Writing

Clear and concise documentation of complex data processes for both technical and non-technical audiences.

Attention to Detail

Precision in tracking data flows, identifying inconsistencies, and maintaining version control.

Problem Solving & Critical Thinking

Capacity to identify gaps in data usage and propose actionable improvements.

Certifications

Credentials like CIPP (privacy), CDMP (data management), or CISA (audit) can add credibility.