Wanted to be a part of our Mission
Risk Analyst – IT & Technology Risk
Role Summary
We are seeking a diligent and detail-oriented Risk Analyst with 5 to 7 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus. The ideal candidate will support the organization in managing IT and cyber security risks, maintaining the IT Risk Management Framework, and ensuring compliance with internal policies and regulatory guidelines. Experience in the BFSI / NBFC / Banking / Financial Services sector is preferred.
Job Overview
We are seeking a diligent and detail-oriented Risk Analyst with 5 to 7 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus. The ideal candidate will support the organization in managing IT and cyber security risks, maintaining the IT Risk Management Framework, and ensuring compliance with internal policies and regulatory guidelines. Experience in the BFSI / NBFC / Banking / Financial Services sector is preferred.
Key Responsibilities
- Policy Review & Improvement: Review, assess, and recommend improvements to IT, Information Security, Cyber Security, and Technology Risk policies and procedures.
- Risk Identification & Monitoring: Identify, assess, and monitor technology risks across systems, applications, cloud environments, vendors, and business processes.
- IT Risk Framework Support: Support the implementation and maintenance of the organization's IT Risk Management Framework.
- Risk & Control Self-Assessments (RCSAs): Perform RCSAs for technology functions and document findings with recommended controls.
- IT Risk Register Management: Maintain IT risk registers and track risk mitigation actions until closure.
- Technology Project Reviews: Review technology projects and system changes from a risk perspective and provide appropriate recommendations.
- Compliance Monitoring: Monitor compliance with internal policies, regulatory guidelines, and industry best practices.
- Cross-Functional Coordination: Coordinate with IT, Information Security, Internal Audit, Compliance, and business teams to ensure effective risk management.
- KRI Tracking & Reporting: Track Key Risk Indicators (KRIs) and prepare periodic risk reports for senior management.
- Governance Documentation: Assist in developing policies, SOPs, and other governance documentation.
- Audit & Regulatory Support: Participate in regulatory inspections, internal and external audits relating to IT Risk and Information Security.
Required Qualifications
- Bachelor's degree in Engineering, Information Technology, Computer Science, or a related discipline.
- 2–4 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus.
- Experience in the BFSI / NBFC / Banking / Financial Services sector is preferred.
- Understanding of Information Security principles, IT General Controls (ITGCs), and technology governance.
Preferred Skills
- Good understanding of IT Risk Management frameworks and industry standards (ISO 27001, RBI Cyber Security Guidelines, NIST, etc.).
- Knowledge of IT infrastructure, cloud environments, applications, databases, networks, and cybersecurity concepts.
- Experience in policy review, risk assessments, control testing, and issue remediation tracking.
- Familiarity with third-party / vendor risk management.
- Strong analytical, documentation, and stakeholder management skills.
- Excellent communication and report-writing abilities.
- Ability to work independently in a fast-paced, dynamic environment.
Must to have certification
- ISO 27001 Lead Implementer
Good to have questions
- CISA – Certified Information Systems Auditor
- CRISC – Certified in Risk and Information Systems Control
- CISSP – Certified Information Systems Security Professional
- CISM – Certified Information Security Manager
Soft Skills & Behavioural Competencies
- Analytical Mindset: Ability to assess complex technology risks and translate findings into actionable recommendations.
- Attention to Detail: Meticulous in documentation, risk register maintenance, and audit support activities.
- Communication: Clear and concise written and verbal communication skills; able to present risk findings to both technical and non-technical stakeholders.
- Ownership: Takes accountability for assigned risk assessments, KRI tracking, and follow-up actions.
- Collaboration: Works effectively across IT, Compliance, Audit, and Business teams to drive risk management outcomes.
- Adaptability: Comfortable managing multiple priorities in a regulated, fast-paced environment.