Senior Information Security Risk Analyst

Risk Assessment & Identification: Execute internal IT risk assessments across IT infrastructure, cloud environments, business applications, and operational workflows.

Maintain and regularly update the enterprise IT Risk Register, tracking risk treatment plans, remediation timelines, and risk acceptance approvals.

Assess the effectiveness of internal IT controls, including access management, backup and disaster recovery, change management, and data security.

Monitor Key Risk Indicators (KRIs) and assist in preparing periodic risk reports and metrics for management and oversight committees.

Strong understanding of internal IT general controls (ITGC), access control, disaster recovery, cloud security concepts, and data protection principles.

Working knowledge of industry frameworks and standards, such as RBI Framework for Outsourcing of Payment and Settlement-related Activities by PSOs…

Demonstrated ability to review vendor reports, security certifications, penetration test summaries, and questionnaires.

Analytical & Communication Skills: Excellent analytical, organizational, and documentation skills with the ability to communicate risk findings clearly to both technical and business stakeholders.