Program Analyst, Privacy/AI Governance/Cyber Advisory

Overview

Coordinate privacy, AI governance and cyber governance, risk and control (GRC) processes as part of the Privacy/AI Governance and Cyber Advisory team, based in the Mumbai office.

What you'll do

• Coordinate end-to-end privacy GRC projects and initiatives to improve compliance and risk posture.
• Mature and maintain the current NIST-P framework and support analysis of NIST-AI (or similar framework) for adoption, enhancing frameworks and controls based on maturity and risk assessment recommendations.
• Monitor control performance across the business for timely and effective execution.
• Assist in executing risk assessments and support the third-party risk assurance process.
• Adopt, maintain and enhance GRC tools.
• Maintain and improve the policy framework in accordance with regulatory and compliance requirements.
• Track progress of reported issues and identified gaps/risks, and support creation of dashboards and metrics to oversee mitigation.
• Collaborate cross-functionally with teams such as Security, Technology, Data, Marketing and People & Culture.
• Act as a privacy and AI champion.
• Perform other duties as requested.

What you'll need

• Bachelor's degree.
• 3 years of experience working in a privacy or data protection GRC function.
• One or more industry-standard privacy professional certifications, such as AIGC, CIPP-M, CIPP-E or CIPP-US.
• Knowledge of control and compliance frameworks, e.g. NIST-P, NIST-AI, NIST-CSF.
• Basic understanding of privacy and security by design, responsible AI development and engineering best practices.
• Experience driving GRC initiatives in a proactive and independent manner.
• Experience working with cross-functional teams in fast-paced environments.
• Solid problem-solving skills and attention to detail.
• Experience and solid skills working with AI enterprise platforms and tooling, e.g. ChatGPT, Gemini, Claude.
• Illustrated history of living the values of Customer, Innovation, Team, Accountability and Trust; unquestionable integrity and ethics are essential.

Nice to have

• Big 4 experience.
• Experience coordinating an external NIST audit.

Details

• Location: Mumbai.
• Hybrid work model: two days in-office, as determined by you and your manager (ideally Tuesday, Wednesday or Thursday); remaining days remote or in office.