Principal GRC Specialist

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

Job Summary

We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.

The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.

Key Responsibilities

• Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
• Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
• Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
• Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
• Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
• Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
• Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
• Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
• Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
• Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.

Required Skills & Experience

• 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
• Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
• Experience with one or more enterprise risk technology platforms, such as:
• RSA Archer
• ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
• Other enterprise GRC and risk management platforms
• Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
• Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
• Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
• Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
• Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
• Strong communication, problem-solving, strategic planning, and decision-making skills.

Preferred Qualifications

• Experience in banking, financial services, insurance, or other regulated industries.
• Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
• Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
• Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.

Key Competencies

• Enterprise GRC Technology Strategy
• Technology Delivery & Programme Leadership
• Risk Platform Implementation and Optimization
• Stakeholder & Vendor Management
• Process Automation and Digital Transformation
• AI/GenAI and Analytics Enablement
• Global Team Leadership
• Governance, Controls and Continuous Improvement

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less

• 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects
• 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod
• Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes
• Experience configuring notifications and inbound email actions, including email-actionable approvals
• Experience with ACL configuration and understanding of role-based access design
• Experience with SLA definitions and task-based SLA behavior
• Experience with Service Catalog record producers and Employee Center / Service Portal configuration
• Proficiency with update set management and promotion across development, test, and production instances
• ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 

ServiceNow USEM Technical Consultant -(Offshore) Contract Role

· Location- Remote

· Contract- 6 months

Job Description

Position Description:  

The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations. 

Primary Responsibilities: 

Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.

Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.

Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.

Handle update set management and oversee code promotion across development, test, and production instances.

Requirements

Qualifications: 

· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects

· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod

· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes

· Experience configuring notifications and inbound email actions, including email-actionable approvals

· Experience with ACL configuration and understanding of role-based access design

· Experience with SLA definitions and task-based SLA behavior

· Experience with Service Catalog record producers and Employee Center / Service Portal configuration

· Proficiency with update set management and promotion across development, test, and production instances

· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 

· Work Experience: 5+ years

· Industry: Technology

Roles & Responsibilities:-

1. Develop and maintain enterprise data governance strategies, policies, and standards aligned with business goals
2. Manage Microsoft Purview accounts, collections, and RBAC; optimize for large-scale environments (50TB+)
3. Design metadata repositories and maintain business glossaries and data dictionaries
4. Implement ingestion workflows via ADF, REST APIs, PowerShell, Azure Functions
5. Define classification rules and sensitivity labels (PII, PCI, PHI); integrate with MIP, DLP, Insider Risk Management
6. Define KPIs and dashboards to monitor data quality across domains
7. Maintain business glossary with domain owners and stewards; enforce approval workflows
8. Automate governance processes using PowerShell, Azure Functions, Logic Apps
9. Set up dashboards for audit logs, compliance reporting, and metadata coverage
10. Collaborate across business, IT, legal, and compliance teams for role alignment

Ideal Candidate:-

1. Strong Data Governance Lead Profile with deep Microsoft Purview and enterprise governance expertise
2. Mandatory (Experience 1): Must have 7+ years of experience in data governance and data management with at least the recent 3+ years of exposure in Microsoft Purview
3. Mandatory (Experience 2): Must have experience defining, leading, and operationalizing an enterprise data governance framework — strategy, policies, and standards aligned to business goals and regulatory compliance.
4. Mandatory (Tech skill 1): Must be proficient in Microsoft Purview — accounts, collections, RBAC, classification/labelling, DLP, Unified Catalog, Data Map, eDiscovery, Compliance Manager, and lifecycle/records management (ideally at large scale, 50TB+).
5. Mandatory (Tech skill 2): Must be strong in metadata management, lineage mapping (e.g. ADF → Synapse → Power BI), data classification, and security governance (PII/PCI/PHI, sensitivity labels, MIP/DLP)
6. Mandatory (Tech skill 3): Must have experience with data governance tools such as Informatica (Axon), Collibra, Atlan, or IBM IG Catalog.
7. Mandatory (Tech skill 4): Must have experience integrating governance with the Azure data stack (Data Lake, Synapse, SQL DB, Power BI) and Snowflake, and automating via ADF, REST APIs, PowerShell, Azure Functions / Logic Apps.
8. Mandatory (Tech skill 5): Must have experience defining data quality KPIs/dashboards, remediation workflows, and business glossary/stewardship (domain owners, approval workflows, metadata audits)
9. Mandatory (Compliance): Must have strong knowledge of GDPR, CCPA, HIPAA, and SOX compliance requirements.
10. Mandatory (Skill): Must be able to bridge technical governance with business and compliance goals, collaborating across business, IT, legal, and compliance teams, and driving governance training and change management
11. Mandatory (Company): B2B Tech/Consulting/B2B Software

ServiceNow TPRM Sr.Solution Engineer (Offshore)

· Location- Remote

· Contract- 6 months

· Budget- 1.50 lpm

Job Description

Position Description: 

Templar Shield is seeking a highly skilled ServiceNow TPRM Sr. Solution Engineer to provide advisory and technical leadership for the design, optimization, implementation, and sustainment of ServiceNow Third-Party Risk Management solutions. This role translates business needs into practical platform capabilities, prioritizes out-of-box functionality, and delivers solutions aligned with Templar Shield and ServiceNow best practices. 

 ​

Requirements

Primary Objectives:

· Provide advisory support and implementation best practices for ServiceNow Third-Party Risk Management.

· Assess and optimize existing ServiceNow TPRM implementations, including processes, workflows, configurations, and operating practices.

· Review and refine third-party risk tiering, Inherent Risk Questionnaires (IRQ), Vendor Risk Assessments (VRA), and scoring methodologies to improve consistency and alignment with business needs.

· Define and recommend solution options for formally tracking risk mitigation activities in ServiceNow, considering applicable licensing constraints and other business, technical, and operational factors.

· Support the creation, review, and refinement of ServiceNow user stories, acceptance criteria, process designs, test plans, and implementation documentation using Agile/Scrum methods.

· Provide advisory and subject matter expert support for client-led development, testing, validation, defect management, user acceptance testing, rollout planning, and rollout execution.

· Prepare and support project-related documentation, solution demonstrations, and stakeholder presentations.

· Provide post-rollout hypercare, troubleshooting, and knowledge transfer for the TPRM solution in accordance with the applicable project plan or other written agreement.  

· Provide knowledge transfer and advisory support to client personnel for ongoing operation, administration, and sustainment of the TPRM program following project completion.  

· Design, configure, implement, and support TPRM workflows, assessments, notifications, reporting, dashboards, portals, integrations, approval paths, exceptions, and ongoing monitoring.  

· Develop and maintain integrations between ServiceNow TPRM and third-party tools using APIs and web services, including JSON, SOAP, and XML.  

· Create and maintain solution design specifications, configuration records, deployment notes, troubleshooting guidance, and technical knowledge articles. 

· Provide technical guidance and TPRM best practices to client teams; train and mentor junior consultants and administrators.  

· Collaborate effectively with distributed teams and manage assigned work in alignment with client expectations and delivery standards.

Qualifications: 

Core Experience:

· 5+ years of ServiceNow development or implementation experience, including at least 3 years focused on ServiceNow TPRM.

· Bachelor's degree from an accredited college or university, or equivalent relevant professional experience.

· Demonstrated ability to lead technical workstreams, facilitate client discussions, solve complex problems, and exercise independent judgment in a customer-focused consulting environment.

· Excellent written and verbal communication, analytical, documentation, troubleshooting, and teamwork skills.

Technical Skills:

· Strong hands-on knowledge of ServiceNow TPRM and relevant platform capabilities, including Flow Designer, UI Builder, business rules, notifications, UI pages, UI macros, formatters, database views, reporting, dashboards, and role-based security.

· Proficiency in ServiceNow scripting and development, including JavaScript, Glide API, web services, and application configuration; experience with HTML and CSS. Familiarity with React, AngularJS, or Java is beneficial.

· Ability to design TPRM data models, workflow automation, integrations, security roles, reports, and client-specific configurations while maintaining platform upgradeability.

· Knowledge of third-party risk assessment, compliance, control testing, issue management, remediation, internal audit, and continuous monitoring methodologies.

· Knowledge of common security and compliance frameworks, such as NIST SP 800-53, NIST SP 800-171, NIST CSF, ISO 27000 series, PCI DSS, CIS, and NERC CIP. Knowledge of ServiceNow Performance Analytics, ITSM, or ITOM is a plus.

Certifications:

· ServiceNow Certified System Administrator required. ServiceNow Certified Implementation Specialist in TPRM preferred.

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com