Governance, Risk & Compliance (GRC) Lead

GlobalData is a productivity and intelligence platform that empowers leaders to act decisively in a world of complexity and change.

By uniting proprietary data, human expertise, and purpose-built AI into a single, connected platform, we help organizations see whats coming, move faster, and lead with confidence.

Our solutions are used by over 5,000 organizations across the worlds largest industries, delivering tailored intelligence that supports strategic planning, innovation, risk management, and sustainable growth.

Data that goes deeper

Proprietary coverage of 95% of global GDP, synthesized in real time from internal and external sources, aligned under a single business taxonomy - giving you earlier insight, unified context, and decisions you can trust.

Experts who turn insight into impact

Human insights that AI alone cant replicate, from industry specialists and strategic advisors, embedded in your workflows to decode complexity and guide high-value action.

What we are looking for:

• 10+ years of experience in GRC, information security, risk management, or compliance
• Strong hands-on experience with security frameworks and regulatory compliance programs
• Proven track record of leading audits and interacting with regulators and external auditors
• Experience operating in global, matrixed organizations
• Strong stakeholder management and executive communication skills
• Bachelors degree in information security, Computer Science, Risk Management, or related field

Preferred Certifications

• CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor. ISO42001
• Relevant privacy certifications (e.g., CIPM, CIPP/E) a plus

Key Attributes

• Strategic thinker with strong execution capability
• High integrity and sound risk judgment]
• Ability to translate complex risk and compliance issues into business impact
• Comfortable operating at both tactical and executive levels

Key Responsibilities:

• Lead and mature the enterprise GRC program, aligning with business and security objectives
• Own and manage information security governance frameworks (e.g., ISO 27001, SOC 2, NIST, CIS)
• Drive risk assessment processes, including enterprise, technology, third-party, and cyber risk
• Oversee compliance with applicable regulations and standards (e.g., GDPR)
• Manage audits, certifications, and regulatory examinations end-to-end
• Develop and maintain policies, standards, and procedures across information security and risk domains
• Lead third-party risk management and vendor security assurance programs
• Provide clear risk reporting and metrics to senior leadership and executive stakeholders
• Partner with Legal and Privacy teams on data protection and regulatory obligations
• Build and mentor a high-performing GRC team in India

Commitment to D&I and EEO:

• We believe strongly in the value of diversity and creating supportive, inclusive
• environments where our colleagues can succeed. As such, GlobalData is proud to be an
• Equal Opportunity Employer. GlobalData is determined to ensure that no applicant or
• employee receives less favorable treatment on the grounds of gender, age, disability,
• religion, belief, sexual orientation, marital status, race, or is disadvantaged by conditions
• or requirements which cannot be shown to be justifiable.