Security Compliance Operations Lead

Job Summary

At Rockstar Games, we create world-class entertainment experiences.

Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry.

Rockstar is on the lookout for a talented Security Compliance Operations Lead to manage and mature a security assurance function within Security GRC.

This role will help ensure key security safeguards are operating effectively across Rockstar s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction.

This is a full-time, in-office position based in Rockstar s large game development studio in Bangalore, India.

Responsibilities

• Ensure key security safeguards are operating operate effectively across Rockstar s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction.
• Lead and develop the Security Compliance Operations function, including control assurance strategy, operating model, validation cadence, evidence management, reporting, remediation follow-up, and stakeholder engagement.
• Build and maintain a practical control assurance program that leverages automation to improve coverage, reduces manual effort, increases repeatability, and strengthens control of health reporting.
• Assess control effectiveness and translate results into clear findings, risk-based priorities, remediation actions, and leadership reporting.
• Partner with cross-functional stakeholders to prioritize remediation and drive accountability for control gaps.
• Define and maintain repeatable validation of workflows, control test procedures, evidence collection methods, operational standards, and control health metrics.
• Support audits, assessments, and compliance reviews by ensuring control evidence is accurate, organized, repeatable, and aligned to applicable internal standards and external frameworks.
• Contribute to broader Security GRC initiatives, including risk management, standards development, exception management, control libraries, and continuous improvement of security governance processes.

Requirements

• Bachelor s degree preferably in Computer Science, Cybersecurity, Information Systems, or a related field.
• 7+ years of experience in information security, security compliance, security operations, GRC, technology risk management, or related cybersecurity role.
• Proven track record leading continuous control assurance and readiness, spanning information gathering, evidence collection, gap analysis, and remediation tracking.
• Hands-on experience designing, operating, or assessing security controls across enterprise technology environments.
• Experience leading the strategy, roadmap, and maturation of compliance, control assurance, or risk management programs, including collaborating with or directing automation engineers to translate manual testing into scalable, tool-driven workflows that balance automated and manual verification for measurable operational reporting.
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or other relevant certifications.
• Strong written and verbal communication skills.
• Strong experience applying CIS Critical Security Controls and frameworks to security assurance activities across identity and access management, endpoint, vulnerability, cloud, network, logging, incident response, and third-party risk domains.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.