Lead GRC Architect - OneTrust

Job Description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced Lead GRC Architect – OneTrust to lead the design, implementation, and enhancement of enterprise Governance, Risk, and Compliance (GRC) capabilities. This role focuses on leveraging OneTrust to establish scalable risk management processes, compliance frameworks, control governance, and cybersecurity oversight across the organization. The ideal candidate will possess deep expertise in cybersecurity governance, risk management, regulatory compliance, and OneTrust platform capabilities. This position requires strong stakeholder engagement, architecture leadership, and the ability to align security objectives with business priorities in a global enterprise environment.

*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

In this role, you will:

\n
• Design and implement enterprise-wide cybersecurity governance, risk, and compliance architectures aligned with business objectives, regulatory requirements, and industry best practices.
\n
• Configure, optimize, and manage OneTrust capabilities including policy management, risk registers, issue management, assessments, and workflow automation.
\n
• Develop and maintain integrated risk management frameworks to identify, assess, prioritize, and monitor technology and business risks.
\n
• Establish control taxonomies, control libraries, and framework mappings across regulatory and security requirements.
\n
• Lead security architecture and design reviews to ensure governance, risk, and compliance requirements are embedded into business and technology initiatives.
\n
• Conduct and facilitate enterprise risk assessments, control evaluations, compliance reviews, and remediation planning activities.
\n
• Develop dashboards, KPIs, KRIs, and executive reporting to communicate compliance posture, risk exposure, and remediation progress.
\n
• Collaborate with business, technology, compliance, audit, and security teams to implement effective governance and risk management practices.
\n
• Support cards and payments initiatives by ensuring security controls, governance standards, and regulatory requirements are appropriately integrated.
\n
• Drive continuous improvement of GRC processes through adoption of emerging technologies, risk insights, regulatory updates, and industry best practices.
\n
• Provide guidance and knowledge transfer to risk owners, architects, product managers, and operational teams on cybersecurity governance and compliance requirements.
\n
• Ensure documentation, governance processes, and reporting standards are maintained and aligned with organizational and regulatory expectations.
\n

What you need to have to be considered

\n
• 10+ years of experience in Cybersecurity Governance, Risk & Compliance (GRC), Technology Risk Management, Security Architecture, or Regulatory Compliance roles.
\n
• Strong hands-on experience implementing and managing OneTrust GRC capabilities including risk management, policy governance, assessments, and compliance programs.
\n
• Deep understanding of cybersecurity risk management frameworks, governance practices, and control environments.
\n
• Experience conducting enterprise risk assessments, control testing, compliance evaluations, and remediation management activities.
\n
• Strong knowledge of security frameworks and regulations such as ISO 27001, NIST, PCI-DSS, SOX, GDPR, privacy regulations, and payment industry requirements.
\n
• Experience supporting cards, payments, financial services, or other regulated environments is highly desirable.
\n
• Strong understanding of policy management, risk registers, control mapping, issue management, audit support, and governance reporting.
\n
• Proven ability to communicate complex security and compliance concepts to technical teams, business stakeholders, and executive leadership.
\n
• Excellent stakeholder management, workshop facilitation, documentation, and presentation skills.
\n
• Relevant certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Auditor, OneTrust Certification, or equivalent are preferred.
\n

Applications will be accepted until 14 Sep 2026.

Salary and Other Compensation:

The annual salary for this position is between $[134,000 - 154,500] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

\n
• Medical/Dental/Vision/Life Insurance
\n
• Paid holidays plus Paid Time Off
\n
• 401(k) plan and contributions
\n
• Long-term/Short-term Disability
\n
• Paid Parental Leave
\n
• Employee Stock Purchase Plan
\n