IT Risk Analyst

Sayyam Investments Private Limited; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Sayyam Investments Private Limited is seeking a diligent Risk Analyst with 5–7 years of IT risk management experience to support the organization in managing IT and cyber security risks. The role emphasizes maintaining the IT Risk Management Framework and ensuring regulatory compliance in a BFSI context.

You will coordinate with IT, Information Security, Internal Audit, Compliance, and business teams to monitor KRIs, perform RCSAs, and help develop governance documentation.

Qualifications

• Bachelor's degree in Engineering, Information Technology, Computer Science, or a related discipline.
• 2–4 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus.
• Exposure to BFSI / NBFC / Banking / Financial Services sector preferred.
• Understanding of Information Security principles, IT General Controls (ITGCs), and technology governance.

Responsibilities

• Review, assess, and improve IT, Information Security, Cyber Security, and Technology Risk policies and procedures.
• Identify, assess, and monitor technology risks across systems, apps, cloud environments, vendors, and processes.
• Support IT Risk Management Framework implementation and maintenance.

Skills

IT Risk Management

Technology Risk

Information Security Governance

IT Audit

Operational Risk

BFSI Sector Knowledge

ITGCs

ISO 27001 Knowledge

Education

Bachelor's degree in Engineering/IT/CS

Job description

Role Summary

We are seeking a diligent and detail-oriented Risk Analyst with 5 to 7 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus. The ideal candidate will support the organization in managing IT and cyber security risks, maintaining the IT Risk Management Framework, and ensuring compliance with internal policies and regulatory guidelines. Experience in the BFSI / NBFC / Banking / Financial Services sector is preferred.

Key Responsibilities

• Policy Review & Improvement: Review, assess, and recommend improvements to IT, Information Security, Cyber Security, and Technology Risk policies and procedures.
• Risk Identification & Monitoring: Identify, assess, and monitor technology risks across systems, applications, cloud environments, vendors, and business processes.
• IT Risk Framework Support: Support the implementation and maintenance of the organization's IT Risk Management Framework.
• Risk & Control Self-Assessments (RCSAs): Perform RCSAs for technology functions and document findings with recommended controls.
• IT Risk Register Management: Maintain IT risk registers and track risk mitigation actions until closure.
• Technology Project Reviews: Review technology projects and system changes from a risk perspective and provide appropriate recommendations.
• Compliance Monitoring: Monitor compliance with internal policies, regulatory guidelines, and industry best practices.
• Cross-Functional Coordination: Coordinate with IT, Information Security, Internal Audit, Compliance, and business teams to ensure effective risk management.
• KRI Tracking & Reporting: Track Key Risk Indicators (KRIs) and prepare periodic risk reports for senior management.
• Governance Documentation: Assist in developing policies, SOPs, and other governance documentation.
• Audit & Regulatory Support: Participate in regulatory inspections, internal and external audits relating to IT Risk and Information Security.

Required Qualifications

• Bachelor's degree in Engineering, Information Technology, Computer Science, or a related discipline.
• 2–4 years of experience in IT Risk Management, Technology Risk, Information Security Governance, IT Audit, or Operational Risk with a technology focus.
• Experience in the BFSI / NBFC / Banking / Financial Services sector is preferred.
• Understanding of Information Security principles, IT General Controls (ITGCs), and technology governance.

Preferred Skills

• Good understanding of IT Risk Management frameworks and industry standards (ISO 27001, RBI Cyber Security Guidelines, NIST, etc.).
• Knowledge of IT infrastructure, cloud environments, applications, databases, networks, and cybersecurity concepts.
• Experience in policy review, risk assessments, control testing, and issue remediation tracking.
• Familiarity with third-party / vendor risk management.
• Strong analytical, documentation, and stakeholder management skills.
• Excellent communication and report-writing abilities.
• Ability to work independently in a fast-paced, dynamic environment.

Must to have certification

• CISA – Certified Information Systems Auditor
• CRISC – Certified in Risk and Information Systems Control
• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager

Good to have questions

• Analytical Mindset: Ability to assess complex technology risks and translate findings into actionable recommendations.
• Attention to Detail: Meticulous in documentation, risk register maintenance, and audit support activities.
• Communication: Clear and concise written and verbal communication skills; able to present risk findings to both technical and non-technical stakeholders.
• Ownership: Takes accountability for assigned risk assessments, KRI tracking, and follow-up actions.
• Collaboration: Works effectively across IT, Compliance, Audit, and Business teams to drive risk management outcomes.
• Adaptability: Comfortable managing multiple priorities in a regulated, fast-paced environment.