IRM Risk & Controls Management (JG4)
XML International
2 - 5 years
Bengaluru
Posted: 05/03/2026
Job Description
IRM Risk & Controls Management (JG4)
Bangalore, India
Full-Time Contract
Global Energy Enterprise | Secure Digital Engineering
We are seeking a senior GRC & DevSecOps professional (9+ years experience) to strengthen secure engineering practices across large-scale digital platforms within a global enterprise environment.
This role sits at the intersection of Governance, Risk & Compliance, secure architecture, and DevSecOps enablement.
You will partner with development, architecture, and platform teams to embed security directly into the software delivery lifecycle.
What Youll Be Doing
- Ensure alignment with enterprise GRC frameworks and control standards
- Drive DevSecOps integration into CI/CD pipelines
- Support GitOps-based workflows and software supply chain security
- Perform secure code reviews and issue triage
- Embed OWASP and secure coding standards into engineering practices
- Conduct threat modeling across AWS/Azure and Kubernetes environments
- Promote security automation and continuous improvement across Agile teams
Mandatory Requirements
- 9+ years of experience in Governance, Risk & Compliance (GRC)
- Strong understanding of NIST, GDPR, and enterprise regulatory frameworks
- Deep knowledge of:
-OWASP Top 10
-OWASP ASVS
-MITRE ATT&CK
- Experience integrating security into DevOps / GitOps pipelines
- Familiarity with tools such as Apiiro, Dependabot
- Experience securing cloud-native environments (AWS / Azure / Kubernetes)
- Strong scripting or programming capability (Python, Shell, etc.)
- Experience working in Agile Release Train (ART) environments
Preferred
- IT/OT convergence experience
- Developer experience platforms (Backstage, Cortex)
- Certifications such as:
-AWS DevOps Engineer
-Azure DevOps Engineer
-CKS
-CSSLP
-SAFe DevOps Practitioner
Ideal Profile
You are not just a compliance specialist you are a security engineer with a governance mindset.
You understand risk frameworks but also speak the language of developers and cloud architecture.
Services you might be interested in
We Search & Apply Jobs for You!
Our team scans through 1000s of opportunities and applies to roles best suited to your profile
Save 100+ hours and focus on what matters - cracking interviews and landing offers.
