Senior Risk Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Risk Analyst based in India.

This role offers a unique opportunity to help build and shape a next-generation risk management function within a fast-growing, technology-driven environment. As a senior member of the security and governance team, you will design and mature risk frameworks that address information security, operational resilience, and emerging AI-related risks. You will leverage data, automation, and AI-enabled methodologies to transform risk management into a proactive and business-focused discipline. Working closely with engineering, legal, product, and leadership teams, you will provide actionable insights that influence strategic decision-making and strengthen organizational resilience. This position is ideal for professionals who enjoy building programs from the ground up and are passionate about modern, data-driven approaches to enterprise risk management.

• Design, implement, and continuously mature a comprehensive enterprise risk management framework, including risk taxonomies, scoring methodologies, risk appetite definitions, and escalation processes.
• Build and maintain the enterprise risk register as a dynamic operational tool, ensuring risks are accurately documented, assigned, tracked, and regularly updated.
• Facilitate risk identification workshops with cross-functional stakeholders to uncover emerging risks and drive effective mitigation strategies.
• Develop AI-assisted workflows to monitor threat landscapes, analyze risk trends, automate reporting processes, and enhance risk visibility across the organization.
• Assess and manage risks related to artificial intelligence technologies, including model governance, privacy concerns, third-party dependencies, and regulatory compliance requirements.
• Support third-party risk management activities, including vendor assessments, risk scoring, and alignment of external risks with enterprise risk frameworks.
• Produce executive-level dashboards, reports, and risk summaries that translate technical findings into business impact and actionable recommendations.
• Develop and monitor Key Risk Indicators (KRIs) and establish reporting mechanisms connected to live data sources for real-time risk insights.
• Provide advisory support on process improvements, technology implementations, remediation initiatives, and security governance activities.
• Partner with technical and business teams to embed risk management practices into day-to-day operations and strategic initiatives.
• Contribute to audit readiness activities, evidence management, and compliance initiatives across security and privacy domains.

Requirements

• Minimum of 6 years of experience in Governance, Risk, and Compliance (GRC), information security, enterprise risk management, or IT audit, preferably within SaaS, cloud-native, or technology-driven environments.
• At least 4 years of hands-on experience building or significantly maturing risk management programs, including risk registers, scoring methodologies, and quantitative risk practices.
• Strong knowledge of security and compliance frameworks, including SOC 2, ISO 27001, NIST CSF, CIS Controls, and familiarity with ISO 31000, ISO 27005, ISO 42001, and NIST AI RMF.
• Demonstrated experience leveraging AI tools, automation platforms, or data analytics solutions to improve risk analysis, reporting, and workflow efficiency.
• Experience developing Key Risk Indicators (KRIs), quantitative risk models, and data-driven reporting frameworks that support executive decision-making.
• Proficiency with GRC platforms such as Drata, Vanta, AuditBoard, ServiceNow GRC, or similar solutions.
• Working knowledge of cloud environments (AWS, Azure, or GCP) and related security technologies, including SIEM, identity management, and cloud security posture tools.
• Experience supporting security and privacy audits, including evidence collection, control walkthroughs, and auditor interactions.
• Strong understanding of privacy regulations and data protection frameworks, including GDPR and CCPA/CPRA principles.
• Excellent analytical, documentation, and communication skills, with the ability to present complex risk concepts to both technical and non-technical audiences.
• Familiarity with third-party risk management practices and vendor risk assessment methodologies.
• Experience with business intelligence and reporting tools such as Tableau, Looker, or Power BI is considered an advantage.
• Relevant certifications such as CRISC, CISA, CISM, CISSP, CCSK, or ISO 27001 Lead Auditor/Implementer are highly desirable.
• Exposure to quantitative risk methodologies, AI governance frameworks, automation scripting, or financial services regulatory environments will be considered a strong plus.

Benefits

• Opportunity to shape and build a modern, AI-driven enterprise risk management program from the ground up.
• Exposure to cutting-edge technologies, including artificial intelligence, cloud security, and advanced risk analytics.
• Collaborative and innovative environment with significant cross-functional engagement and strategic visibility.
• Career growth opportunities within a rapidly scaling global organization.
• Flexible working arrangements that support work-life balance and employee wellbeing.
• Access to continuous learning opportunities, certifications, and professional development initiatives.
• Inclusive and diverse culture that values innovation, collaboration, and individual contributions.
• Opportunity to directly influence organizational resilience, security strategy, and executive decision-making processes.