GRC Architect

Job Summary

We need urgently one GRC person who is good at documentation and is knowledgeable about controls needed for regulations. Perfect match would be someone who knows NIS 2 especially ENISA controls. If not we can consider NIST CSF or 800-53.

Responsibilities

• Design and maintain an integrated governance risk and compliance framework that aligns PCI DSS GDPR and CCPA obligations with organizational policies and control objectives to support sustainable business growth
• Develop comprehensive compliance management strategies and roadmaps that translate regulatory requirements into practical control designs tailored to work from home environments and rotational shift operations
• Conduct detailed assessments of existing processes and systems to identify compliance gaps related to PCI DSS GDPR and CCPA and recommend remediation actions that strengthen organizational resilience
• Create standardized methodologies for risk identification risk prioritization and risk treatment that embed data protection and payment card security into everyday business activities
• Coordinate cross functional compliance initiatives by defining clear objectives deliverables and timelines that help teams understand their responsibilities and achieve consistent regulatory adherence
• Implement monitoring mechanisms and compliance dashboards that provide management with transparent visibility into control effectiveness incident trends and regulatory obligations across geographies
• Guide project teams on embedding privacy by design and security by design principles into technology solutions ensuring that customer data and payment information remain protected throughout the lifecycle
• Prepare and refine policies standards and procedures for data handling access management logging and incident response that reflect PCI DSS GDPR and CCPA requirements and support remote work practices
• Collaborate with audit and assurance functions to plan and support internal and external assessments ensuring evidence is well organized findings are accurately documented and remediation is tracked
• Provide structured training and awareness content for employees working remotely and in rotational shifts so they understand compliance expectations practical behaviors and the impact of nonconformance
• Evaluate new tools platforms and automation opportunities that improve compliance management activities such as control testing documentation retention and regulatory reporting while reducing manual overhead
• Analyze incidents deviations and near misses to determine root causes and recommend targeted improvements that reduce the likelihood of recurrence and improve overall governance maturity
• Document architecture decisions data flows and control mappings in a clear manner so stakeholders can trace how regulatory requirements are implemented and verify that risk is appropriately managed

Qualifications

• Possess extensive hands on experience in compliance management frameworks with demonstrated ability to interpret complex regulatory requirements and convert them into actionable control designs
• Bring deep expertise in PCI DSS domains including network security access control logging vulnerability management and cardholder data protection applied within large scale enterprise environments
• Demonstrate strong knowledge of GDPR principles such as lawfulness fairness transparency data minimization purpose limitation and data subject rights with proven experience implementing compliant solutions
• Show practical experience applying CCPA requirements including consumer rights disclosure obligations data sale restrictions and opt out mechanisms within business processes and technical architectures
• Apply advanced understanding of governance and compliance methodologies to design policies standards and procedures that are pragmatic easy to adopt and aligned with organizational risk appetite
• Utilize excellent analytical and problem solving skills to assess complex environments balance regulatory expectations with business needs and propose clear prioritized remediation actions
• Communicate clearly with technical and nontechnical stakeholders to explain regulatory impacts control choices and risk implications in a concise actionable manner that encourages informed decisions

À savoir avant de postuler

• Autorisation de travail: Cognizant ne prendra en considération que les candidats à ce poste qui sont légalement autorisés à travailler au Canada sans avoir besoin d'un parrainage de l'employeur, aujourd'hui ou à l'avenir.
• Mesures d’adaptation: Si vous avez un handicap qui nécessite des mesures d’adaptation raisonnable pour effectuer une recherche d’emploi ou poser une candidature, veuillez envoyer un courriel à [email protected] avec votre demande et vos coordonnées.
• L’IA dans notre processus de recrutement: Nous utilisons des outils d'intelligence artificielle (IA) pour trier et évaluer les candidatures efficacement. Notre équipe examine ensuite les candidatures et décide qui passe à l’étape suivante.
• Poste à pourvoir: Sauf indication contraire, ce poste est actuellement vacant et nous cherchons à le pourvoir.
• Exigences linguistiques: Nous demandons à tous les candidats de posséder une connaissance de base de l’anglais afin de faciliter les communications internes. Pour les postes au Québec, la capacité à communiquer efficacement en anglais est requise car vous fournirez des services à et collaborerez avec des parties prenantes anglophones situées hors de la province.
• Inclusion: Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, des renseignements génétiques, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée par les lois fédérales, provinciales ou locales.

À propos de Cognizant
Cognizant (NASDAQ: CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif: améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus: cognizant.ai ou @cognizant.