Manager - IT Risk Management

Marsh; Maharashtra; Hybrid; INR 2,500,000 - 4,000,000; Full time

Job summary

Marsh is seeking a Manager – IT Risk Management to join the Global Information Security (GIS) team in Pune. This hybrid role requires in-office presence at least three days a week and involves supporting risk assessments across cyber, IT, and vendor risk, maintaining risk documentation, and helping drive remediation and governance activities.

You will collaborate with engineering, security, infrastructure, procurement and business teams to ensure risks are identified, tracked, and managed

Qualifications

• 8 years of experience in technical risk, cybersecurity, IT risk, third party risk, audit, or related field.
• Understanding of risk management concepts and controls.
• Ability to review technical documentation and identify gaps or concerns.
• Strong written and verbal communication and collaboration skills.
• Experience with risk registers, remediation plans, and reporting.

Responsibilities

• Support risk assessments across infrastructure, applications, cloud, endpoints, SaaS and supporting platforms.
• Identify control gaps by reviewing technical documentation, evidence and system information.
• Assist teams with risk management activities and remediation tasks.
• Maintain the risk register and track risks through resolution.
• Prepare risk metrics, dashboards and leadership reports.

Skills

Technical risk

Cybersecurity

IT risk

Third party risk

Audit

Compliance

Job description

We are seeking a talented individual to join our GIS at Marsh. This role will be based in Pune. This is a hybrid role that has a requirement of working at least three days a week in the office.

Manager – IT Risk Management

The Global Information Security (GIS) team at Marsh is seeking a motivated and detail-oriented Analyst to support technical risk management activities across cyber, IT, third party, and AI-related risk domains. In this role, you will help assess and track risk, maintain risk documentation, support remediation efforts, and contribute to reporting and governance activities. You will work closely with more senior team members and partner with engineering, security, infrastructure, procurement, and business teams to help ensure risks are identified, recorded, and managed appropriately.

WHAT YOU CAN EXPECT:

• A fast-paced environment with a great culture and supportive leadership.
• Opportunities to learn how technical risk is identified, assessed, and managed.
• Meaningful work that supports the team’s risk management and reporting activities.
• Collaboration with experienced colleagues across technical and business teams.

WE WILL COUNT ON YOU TO:

• Support technical risk assessments across infrastructure, applications, cloud environments, endpoints, SaaS solutions, and supporting platforms.
• Help identify control gaps and potential risk concerns by reviewing technical documentation, evidence, and system information.
• Assist teams with risk management activities and provide feedback on necessary outstanding tasks.
• Escalate complex issues or concerns to more senior team members for review and decision-making.
• Assist in maintaining the risk register, ensuring risks are documented accurately and tracked through resolution.
• Support the development and tracking of risk treatment plans and remediation actions.
• Assist with third party technical assessments by reviewing vendor documentation, evidence, and control descriptions.
• Help assess SaaS and other technology solutions for basic security, resilience, data handling, access management, logging, and recovery considerations.
• Work with senior team members to document findings, track issues, and follow up on remediation progress.
• Help prepare risk metrics, dashboards, and reporting materials for leadership and governance forums.
• Assist with the improvement of risk workflows, evidence collection, and reporting processes.
• Review technical documentation, architecture diagrams, and system summaries to help identify risk exposure.
• Support issue management, remediation tracking, and risk acceptance documentation.
• Contribute to the development of standards, templates, and guidance for risk management activities.
• Assist with AI-related technical risk reviews and related governance activities as needed.
• Communicate clearly with internal stakeholders and vendors to gather information and support assessments.

WHAT YOU NEED TO HAVE:

• 8 years of experience in technical risk, cybersecurity, IT risk, third party risk, audit, compliance, or related field.
• Basic understanding of cybersecurity, IT risk, and third party risk management concepts.
• Familiarity with risk registers, issue tracking, remediation plans, or reporting tools.
• Ability to review technical documentation and identify potential gaps or concerns.
• Strong attention to detail and analytical thinking.
• Good written and verbal communication skills.
• Ability to work collaboratively with technical and non-technical stakeholders.
• Willingness to learn about security controls, cloud services, SaaS applications, and modern infrastructure environments.
• Ability to manage multiple tasks and follow through on deadlines.
• Comfort working in a large, complex, and cross-functional environment.

WHAT MAKES YOU STAND OUT:

• Exposure to technical risk assessments, third party reviews, or vendor due diligence.
• Familiarity with cloud, infrastructure, SaaS, or application environments.
• Experience supporting remediation tracking, risk documentation, or reporting activities.
• Interest in risk management, governance, and technology controls.
• Strong organizational skills and a proactive attitude.
• Eagerness to learn and grow in a technical risk or third party risk role.
• Ability to work independently on routine tasks while knowing when to escal

WHY JOIN OUR TEAM:

• We help you be your best through professional development opportunities, interesting work, and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and make an impact for colleagues, clients, and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to support your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.