Risk Analyst

Job Summary:

Risk Analyst

Key Responsibilities:

• Conduct and lead

  vendor risk assessments

  based on

  ISO 27001, PCI DSS, cloud controls

  , and regulatory guidelines
• Own the

  complete audit lifecycle,

  including planning, execution, reporting, and closure of findings
• Perform

  onsite vendor assessments

  (remote only in exceptional cases)
• Review audit evidence, decide on acceptance/rejection, and guide teams on audit gaps
• Prepare and review

  draft and final audit reports

• Manage stakeholders and ensure

  timely reporting and SLA adherence

• Track observations, follow up for closures, and maintain audit documentation
• Prepare

  KRIs, MIS, and monthly/quarterly data

  for regulatory submissions
• Senior resources will be expected to support and guide junior reviewers as required.

Required Skills & Experience

• 2-7 years of experience in

  Banking/BFSI audits, vendor risk assessments, or information security audits

• Strong understanding of

  audit lifecycle management and information security controls

• Hands-on experience with

  ISO 27001, PCI DSS, cloud security controls

  , and regulatory compliance requirements
• Proven ability in

  stakeholder management

  , audit planning, and ownership of deliverables
• Strong analytical skills with the ability to assess evidence and identify control gaps
• Excellent report writing, documentation, and communication skills
• Willingness to travel for onsite vendor assessments

Certifications:

• ISO 27001 Lead Auditor (LA)

  Mandatory

• PCI DSS Certification

  – Preferred

• CISA / CISM / CRISC / CISSP

  – Preferred

• Job Location: Airoli

*Immediate joiners preferred*