Nykaa - Senior Security Engineer - GRC Tools

A Governance, Risk, and Compliance (GRC) professional needs a diverse skill set to effectively manage an organization's governance, risk management, and compliance activities. Key skills required for this role include strong analytical and problem-solving abilities, excellent communication and interpersonal skills, and a solid understanding of regulatory frameworks and industry standards. It is also essential to have proficiency in GRC tools and technologies. Specific Skills & Knowledge Areas: - Risk Management: Understanding the risk management lifecycle, conducting risk assessments, and developing mitigation strategies. - Compliance: Knowledge of relevant regulatory requirements such as SOX, GDPR, ISO 27001, and the ability to ensure organizational alignment with these standards. - Governance: Ability to establish and maintain governance frameworks, policies, and procedures. - Communication: Excellent written and verbal communication skills to effectively convey GRC concepts and findings to stakeholders. - Analytical Skills: Ability to analyze data, identify trends, and develop solutions to address identified risks and compliance gaps. - Technical Skills: Familiarity with GRC tools like ServiceNow and Archer, and an understanding of information security principles. - IT Proficiency: Understanding of IT security principles and standard processes. - Interpersonal Skills: Ability to collaborate effectively with different teams and stakeholders. - Problem-Solving: Strong ability to identify and resolve GRC-related issues. - Project Management: Ability to manage projects related to GRC initiatives. This role requires a comprehensive understanding of risk, compliance, and governance principles, as well as the ability to apply them effectively within the organization. Effective communication, analytical thinking, and project management skills are key to success in this role.,