GRC Specialist

📋 Description

• • Own the end-to-end lifecycle of Jiostar’s Governance, Risk & Compliance (GRC) program across television, streaming, and digital platforms that reach 750 million viewers weekly. You will translate regulatory obligations into pragmatic controls that protect customer data, safeguard content IP, and keep the business agile in a fast-moving media landscape.
• • Design, implement, and continuously monitor GRC frameworks that scale across multiple Jiostar entities, subsidiaries, and joint ventures. Translate ISO 27001, DPDPA, GDPR, PCI DSS, and PIPEDA requirements into lightweight, repeatable processes that engineers actually enjoy following.
• • Lead internal and external audit engagements from scoping to closure. Build evidence libraries, automate artifact collection, and track remediation in JIRA, Vanta, or similar tools so that audit fatigue becomes a thing of the past.
• • Conduct privacy impact assessments and data-retention reviews for new features on the streaming platform. Partner with legal, product, and data science teams to ensure that recommendation engines, ad-tech pipelines, and user analytics comply with global data-protection laws.
• • Evaluate, pilot, and roll out next-generation GRC, privacy, and security tools. Run structured proof-of-concepts, score vendors on functional fit, cost, and roadmap alignment, then shepherd the selected solution through procurement, configuration, and user-adoption.
• • Inject AI and workflow automation into repetitive GRC tasks—think automated evidence harvesting from AWS Config, risk heat-maps that update in real time, or chatbots that answer “Are we compliant?” before the coffee finishes brewing.
• • Build and maintain a living risk register that quantifies threats to content delivery, subscriber data, and broadcast continuity. Translate technical findings into business language for executives and board committees.
• • Champion a culture of security and privacy across engineering squads, marketing, ad-ops, and content production. Host lunch-and-learns, craft policy cheat-sheets, and embed yourself in sprint reviews to catch compliance drift early.
• • Collaborate with cloud security architects to map AWS, Azure, and GCP controls to regulatory requirements. Ensure that multi-region streaming infrastructure meets residency mandates without slowing deployments.
• • Present monthly GRC dashboards to stakeholders ranging from SOC analysts to Bollywood producers. Story-tell with data, spotlighting how risk reduction translates into uninterrupted IPL streams and blockbuster premieres.
• • Contribute to incident-response playbooks for data breaches or content leaks. Run tabletop exercises with legal, PR, and customer-care teams so that everyone knows exactly what to do when the spotlight turns on Jiostar.
• • Stay ahead of emerging regulations—be it India’s Digital Personal Data Protection Act tweaks or new EU AI rules—and translate their impact into actionable roadmaps for product and engineering leaders.