IT Risk Assessment

Location: Bangalore

Experience: 5 to 9 years

We are looking for an experienced IT Risk & Information Security Specialist to join our team in Bangalore. The ideal candidate will have a strong background in Information Security, IT compliance, and security controls, with hands-on experience supporting audits, risk assessments, and driving continuous improvement in IRM processes.

Key Responsibilities:

Understand end-to-end IT processes and how controls are integrated within them

Assess and operate IT controls effectively and in a timely manner

Identify and understand risks covered by controls

Ensure controls are properly designed to mitigate risks and serve their intended purpose

Maintain and provide supporting evidence for control operations and monitoring

Support internal and external audits

Lead and optimize project risk assessments including security reviews, stage gate sign-offs, and remediation plans

Ensure compliance with legal, regulatory, and company-specific requirements

Collaborate with Information Risk Management (IRM) teams and other stakeholders

Drive continuous improvement (CI) of IRM processes and innovation in security practices

Educate staff and influence behaviours toward risk awareness and mitigation

Participate in quarterly risk updates and contribute to safety, health, and compliance reporting

Required Skills:

59 years of experience in Information Security, IT Risk Management, or IT Compliance

Strong understanding of ITGC, SOX, security frameworks (ISO 27001, NIST, PCI-DSS, GDPR, HIPAA)

Experience supporting audits and preparing documentation for control effectiveness

Familiarity with IRM frameworks, policies, and risk assessment methodologies

Excellent stakeholder management, communication, and collaboration skills