Lead - GRC Engineer

Key Responsibilities:

• Data Flow Mapping: Identify and document how data is collected, processed, stored, and shared across internal systems and platforms.

• Third-Party Data Analysis: Evaluate data exchange practices with vendors, partners, and service providers to ensure alignment with security and compliance standards.

• Documentation Development: Create and maintain comprehensive records of data usage, including diagrams, inventories, and usage logs.

• Compliance Support: Assist in ensuring data practices meet regulatory requirements such as GDPR, DPDP, HIPAA, or ISO 27001.

• Stakeholder Collaboration: Work closely with IT, Legal, Security, and Procurement teams to gather insights and validate documentation.

• Risk Identification: Highlight potential data risks or inefficiencies in current processes and recommend mitigation strategies.

• Audit Readiness: Prepare documentation and reports to support internal and external audits.

Qualifications:

• Bachelor's degree in computer science, Information Systems, Data Management, or related field.

• 10+ years of experience in data governance, documentation, or IT compliance roles.

• Familiarity with data mapping tools (e.g., Collibra, BigID) and documentation platforms (e.g., Confluence, SharePoint).

• Strong understanding of data privacy regulations and third-party risk management.

• Excellent analytical, organizational, and communication skills.

Communication & Collaboration Skills:

• Stakeholder Engagement 

Ability to work cross-functionally with IT, Legal, Security, and Procurement teams.

• Technical Writing 

Clear and concise documentation of complex data processes for both technical and non-technical audiences.

• Attention to Detail 

Precision in tracking data flows, identifying inconsistencies, and maintaining version control.

• Problem Solving & Critical Thinking 

Capacity to identify gaps in data usage and propose actionable improvements.

• Certifications 

Credentials like CIPP (privacy), CDMP (data management), or CISA (audit) can add credibility.