Lead - GRC

Key Responsibilities

• Data Flow Mapping : Identify and document how data is collected, processed, stored, and shared across internal systems and platforms.
• Third-Party Data Analysis : Evaluate data exchange practices with vendors, partners, and service providers to ensure alignment with security and compliance standards.
• Documentation Development : Create and maintain comprehensive records of data usage, including diagrams, inventories, and usage logs.
• Compliance Support : Assist in ensuring data practices meet regulatory requirements such as GDPR, DPDP, HIPAA, or ISO 27001.
• Stakeholder Collaboration : Work closely with IT, Legal, Security, and Procurement teams to gather insights and validate documentation.
• Risk Identification : Highlight potential data risks or inefficiencies in current processes and recommend mitigation strategies.
• Audit Readiness : Prepare documentation and reports to support internal and external audits.

Qualifications

Communication & Collaboration Skills

Ability to work cross-functionally with IT, Legal, Security, and Procurement teams.

Clear and concise documentation of complex data processes for both technical and non-technical audiences.

Precision in tracking data flows, identifying inconsistencies, and maintaining version control.

Capacity to identify gaps in data usage and propose actionable improvements.

Credentials like CIPP (privacy), CDMP (data management), or CISA (audit) can add credibility.

Skills Required

Data Privacy Regulations, Data Flow Mapping, Third-Party Risk Management