{"id":3776499,"url":"https://alion.io/job/mobility-global-senior-cyber-grc-specialist","title":"Senior Cyber GRC Specialist","company":{"id":98864,"name":"Mobility Global","domain":"mobilityglobal.com","url":"https://alion.io/company/mobility-global","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"ServiceNow","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-04T17:27:33Z","employer_posted_date":null,"last_verified_at":"2026-11-04T17:27:33Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"Why Mobility Global\n\nAt Mobility Global, our mission is to provide trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we're creating new opportunities for our customers, our business, and our people.\n\nRole Summary\n\nThe Senior Cyber GRC Specialist is an individual contributor responsible for assessing and managing cybersecurity risks arising from third-party relationships and deviations from approved security policies and standards. The role serves as a technical risk advisor across Security, Technology, Procurement, Legal, Privacy, and business teams.\n\nThis position requires practical cybersecurity knowledge to review technical controls, ask appropriate follow-up questions, challenge incomplete or unsupported responses, evaluate compensating controls, and translate technical risk into clear business impact. The role assesses risk and provides recommendations; formal risk acceptance remains with the authorized business and security approvers.\n\nKey Responsibilities\n\nPerform risk-based cybersecurity assessments of vendors, suppliers, SaaS providers, cloud service providers, and other third parties during onboarding, reassessment, renewal, and material service changes. \nReview security questionnaires, independent assurance reports, certifications, penetration test summaries, architecture information, vulnerability management practices, incident response capabilities, and other relevant security evidence. \nEngage vendor and internal technical teams to clarify security architecture, control design, identified gaps, remediation commitments, and residual risk. \nIdentify and document third-party cyber risks, determine risk severity, recommend risk treatment, and track agreed remediation actions through closure. \nApply assessment depth based on service criticality, data sensitivity, connectivity, hosting model, regulatory exposure, and potential business impact. \nAdminister the security exception management lifecycle, including intake, completeness review, risk assessment, routing, approval coordination, expiration, renewal, closure, and reporting. \nEvaluate exception requests against applicable security policies and standards, including the business justification, scope, duration, technical exposure, compensating controls, remediation plan, and residual risk. \nChallenge exception submissions when risks are not adequately understood, supporting evidence is insufficient, or proposed compensating controls do not reasonably reduce exposure. \nPartner with Security Architecture, Cloud Security, Application Security, Infrastructure, Identity and Access Management, Vulnerability Management, and other subject matter experts when specialized validation is required. \nPrepare clear risk recommendations for authorized approvers and governance forums while maintaining appropriate separation between risk assessment, risk ownership, and risk acceptance. \nMaintain accurate risk records and supporting evidence in the designated governance, risk, and compliance platform. \nDevelop and report metrics on assessment volume, risk severity, remediation status, overdue actions, exception aging, renewals, expirations, and risk concentrations. \nIdentify recurring control gaps and trends across vendors and exceptions and recommend improvements to policies, standards, assessment criteria, contract requirements, and governance processes. \nSupport audits, certifications, regulatory inquiries, and customer assurance activities related to third-party cyber risk and security exception management. \nContribute to continuous improvement of risk methodologies, procedures, templates, decision criteria, and stakeholder guidance. \nThis role would report to the Senior Manager, Cyber Governance & Risk Management.\n\nRequired Qualifications\n\n5 -10 years of experience in cybersecurity, information security risk, technology risk, third-party risk management, security architecture, security engineering, or a related discipline. \nDemonstrated experience performing technical security assessments of vendors, cloud services, applications, infrastructure, or enterprise technology environments. \nExperience evaluating policy or control exceptions, compensating controls, remediation plans, and residual risk is strongly preferred. \nWorking knowledge of identity and access management, multifactor authentication, privileged access, cloud security, network security, vulnerability management, endpoint protection, application security, encryption, logging and monitoring, incident response, resilience, and data protection. \nAbility to interpret common security evidence, including SOC reports, ISO 27001 certifications, penetration test summaries, vulnerability information, security architecture documentation, and control descriptions. \nWorking knowledge of recognized cybersecurity and risk frameworks, such as ISO 27001, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, and TISAX. \nStrong analytical judgment with the ability to distinguish administrative gaps from material technical risk and to evaluate whether proposed controls adequately reduce exposure. \nAbility to communicate clearly with technical teams, vendors, business owners, procurement, legal, privacy, auditors, and senior stakeholders. \nStrong documentation, organization, and follow-through skills, with the ability to manage multiple assessments, exceptions, and remediation actions concurrently. \nAbility to operate independently, escalate material concerns appropriately, and provide objective, evidence-based risk recommendations. \n\nPreferred Qualifications\n\nProfessional certification such as CISSP, CISM, CRISC, CCSK, CCSP, Security+, or an equivalent credential. \nExperience with a governance, risk, and compliance platform or third-party risk management solution, such as ServiceNow, Archer, LogicGate, OneTrust, or a comparable platform. \nExperience supporting ISO 27001, SOC 2, TISAX, customer assurance, regulatory compliance, or audit activities. \nPrior technical experience in security engineering, security architecture, cloud security, vulnerability management, incident response, or a security operations function. \n\nThis is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.\n\nWhat's In It For You\n\nCompetitive compensation package, including base salary and incentive opportunities where applicable.\nComprehensive health and wellness benefits for employees and eligible dependents.\nRetirement savings programs, including company matching contributions where available.\n\nEqual Opportunity Employer\n\nMobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.\n\nRecruitment Fraud Alert\n\nMobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.","description_format":"text","description_chars":7426,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["E-learning","Information Security","Market Research","Virtual Events"],"lifecycle":[{"event":"open","at":"2026-11-04T23:09:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":9,"expected_fill_days":30,"reasons":["seen:9","velocity","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/mobility-global-senior-cyber-grc-specialist","json_url":"https://alion.io/job/mobility-global-senior-cyber-grc-specialist.json","meta":{"generated_at":"2026-11-15T05:26:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":726,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":98864},"rest":"https://alion.io/mcp/rest/get_company?id=98864"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmobility-global-senior-cyber-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmobility-global-senior-cyber-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmobility-global-senior-cyber-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mobility-global-senior-cyber-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmobility-global-senior-cyber-grc-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3776499}},{"tool":"search_jobs","arguments":{"company":"mobilityglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3776499},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}