Data Consultant Risk Mandate

Wsne Consulting; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Wsne Consulting is seeking a data risk professional to lead and support risk assessments across applications, databases and information assets. You will implement data classification, work with data owners, and strengthen governance and accountability.

Responsibilities include documenting data lineage, evaluating data protection controls, monitoring regulatory compliance, and preparing risk reports for senior management.

Qualifications

• 3 to 5 years of experience in Data Risk, Information Risk Management, Technology Risk, or IT Audit.
• Strong understanding of Data Governance frameworks including Data Ownership and Data Stewardship.
• Experience implementing Data Classification programs for sensitive and regulated information.
• Knowledge of Data Protection technologies (encryption, access management, DLP).
• Hands-on experience with GRC platforms such as ServiceNow GRC, RSA Archer, OpenPages.

Responsibilities

• Lead and support data risk assessments across business applications, databases, and critical information assets.
• Implement and maintain data classification frameworks to identify and protect sensitive data.
• Collaborate with data owners, stewards, and stakeholders to strengthen governance and accountability.
• Assess and document data lineage, data flows, and data handling processes to identify risk exposures.
• Evaluate data protection controls including encryption and access management; implement DLP where applicable.
• Monitor compliance with data security policies, standards, and regulatory requirements.
• Use GRC platforms to document findings, manage risk registers, and track remediation activities.
• Support regulatory assessments (GDPR, GLBA, SEC, FINRA, CCPA) and ITGC reviews; identify remediation steps.
• Partner with Cyber Security, Privacy, Risk, Audit, and Tech teams; prepare risk reports and executive summaries.

Skills

Data Risk

Information Risk Mgmt

Technology Risk

IT Audit

Data Governance

GRC platforms

GDPR GLBA SEC FINRA

Data Lineage

Tools

ServiceNow GRC

RSA Archer

OpenPages

Job description

Your work profile

• Lead and support data risk assessments across business applications, databases, and critical information assets.
• Implement and maintain data classification frameworks to identify and protect sensitive, confidential, and regulated data.
• Collaborate with data owners, stewards, and business stakeholders to strengthen data governance practices and accountability.
• Assess and document data lineage, data flows, and data handling processes to identify potential risk exposures.
• Evaluate and recommend data protection controls, including encryption, access management, and Data Loss Prevention (DLP) solutions.
• Monitor compliance with organizational data security policies, standards, and regulatory requirements.
• Utilize GRC platforms (ServiceNow GRC, RSA Archer, or equivalent) to document findings, manage risk registers, and track remediation activities.
• Support regulatory and compliance assessments related to GDPR, GLBA, SEC, FINRA, and other applicable data protection requirements. Perform technology risk assessments and evaluate IT General Controls (ITGCs) across applications, infrastructure, and business processes. Identify gaps in data management, access controls, and security processes and provide practical remediation recommendations.
• Partner with Cyber Security, Privacy, Risk, Audit, and Technology teams to improve the organization's risk posture. Prepare risk reports, dashboards, and executive summaries for stakeholders and senior management. Assist in policy development, control testing, issue management, and risk monitoring activities. Support internal and external audits by providing evidence, documentation, and remediation status updates.

Key skills required:

1. 3 to 5 years of experience in Data Risk, Information Risk Management, Technology Risk, or IT Audit.
2. Strong understanding of Data Governance frameworks, including Data Ownership, Data Stewardship, Metadata Management, and Data Lineage.
3. Experience implementing and managing Data Classification programs for sensitive and regulated information.
4. Knowledge of Data Protection technologies, including Encryption, Access Management, Privileged Access Controls, and DLP solutions. Hands-on experience with GRC platforms such as ServiceNow GRC, RSA Archer, OpenPages, or equivalent.
5. Working knowledge of regulatory requirements including GDPR, GLBA, SEC, FINRA, CCPA, and other privacy/security regulations.
6. Experience performing Technology Risk Assessments and IT General Controls (ITGC) reviews.