10 Risk assessment Jobs in Bangalore (Bengaluru) | Risk assessment Job openings in Bangalore (Bengaluru)

🔹 Role: Third Party Cyber Risk Services Operations – Lead Analyst

📍 Location: Bellandur, Bangalore

🕐 Work Timings: 01:30 PM – 10:30 PM

🕐 Type: Contract to hire

🏢 Work Mode: Monday (WFH), Tuesday–Friday (WFO)

📅 Experience: 10–12 Years

Job Summary:

Role Summary

The Lead Analyst will support Third-Party Cyber Risk Services operations by managing daily intake, executing workflows, and delivering data-driven risk assessments. This role is responsible for making defensible third-party risk decisions (including accept/reject), partnering with cross-functional stakeholders, and strengthening organizational cyber resilience.

Key Responsibilities

Third-Party Risk Management

• Manage and maintain the third-party risk management framework
• Perform inherent and residual risk assessments using data-driven methodologies
• Identify cyber risks associated with third-party vendors

Risk Analysis & Mitigation

• Define, implement, and track mitigation and risk treatment plans
• Analyse trade-offs to manage residual risk effectively
• Support defensible risk decisions aligned with business objectives

Stakeholder Collaboration

• Partner with:
• Procurement (contract advisors, category managers)
• Legal teams
• Business/Product owners
• Risk managers & analysts
• Security engineers & threat intelligence teams
• Communicate risk insights, impacts, and recommendations clearly

Operations & Delivery

• Manage intake and prioritize work based on risk
• Meet SLAs without compromising quality
• Handle escalations and resolve high-risk issues promptly

Process Improvement & Automation

• Define and enhance processes, procedures, and tools
• Identify efficiency opportunities and leverage automation/AI
• Drive continuous improvement initiatives

Metrics & Reporting

• Develop and analyse risk metrics and dashboards
• Track trends, risk posture, and control effectiveness

Required Qualifications

Core Expertise

• Strong experience in Third-Party Risk Management (TPRM)
• Knowledge of information security concepts: threat, vulnerability, impact
• Ability to apply risk concepts to policies, standards, and controls

Framework Knowledge

• Hands-on experience with NIST Cybersecurity Framework (CSF)
• Understanding of control effectiveness and compliance assurance

Analytical & Problem-Solving Skills

• Strong critical thinking and risk analysis capability
• Ability to break down complex problems and work in ambiguous environments
• Experience in designing and maturing processes

Communication & Leadership

• Excellent written and verbal communication skills
• Ability to influence stakeholders across levels
• Strong cross-functional collaboration skills

Agile & Execution Skills

• Experience working in agile environments
• Ability to prioritize tasks, remove blockers, and adapt quickly

Key Competencies

• Risk Assessment & Decision-Making
• Cybersecurity & Compliance
• Stakeholder Management
• Process Optimization
• Data-Driven Insights
• Automation & Innovation 

Job Description:

We are looking for a skilled Ethical Hacker (Penetration Tester) who will be responsible for identifying vulnerabilities in systems, networks, and applications before malicious hackers can exploit them. The role involves conducting security assessments, penetration testing, and recommending security improvements to strengthen the organization’s cybersecurity posture.

Key Responsibilities

·      Conduct penetration testing on web applications, mobile applications, APIs, and networks.

·      Identify security vulnerabilities and weaknesses in systems and infrastructure.

·      Perform vulnerability assessments using automated tools and manual techniques.

·      Simulate cyberattacks to evaluate the effectiveness of existing security measures.

·      Prepare detailed security reports highlighting risks, vulnerabilities, and remediation strategies.

·      Collaborate with development, DevOps, and IT teams to fix security gaps.

·      Ensure compliance with security standards and frameworks such as OWASP, ISO 27001, and NIST.

·      Conduct security audits and risk assessments across digital platforms.

·      Stay updated on the latest hacking techniques, security vulnerabilities, and cyber threats.

Required Skills & Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 4+ years of experience in ethical hacking, penetration testing, or cybersecurity.
• Strong knowledge of network security, system security, and application security.
• Experience with security tools such as:
• Burp Suite
• Metasploit
• Nmap
• Wireshark
• Kali Linux
• Knowledge of OWASP Top 10 vulnerabilities.
• Understanding of Linux, Windows, and cloud security environments.
• Strong analytical and problem-solving skills.

Preferred Certifications

• CEH (Certified Ethical Hacker)
• OSCP (Offensive Security Certified Professional)
• CompTIA Security+
• CISSP (optional but valuable)

Key Competencies

• Cybersecurity risk assessment
• Vulnerability management
• Penetration testing methodologies
• Incident response awareness
• Strong documentation and reporting skills

Nice to Have

• Experience in cloud security (AWS, Azure, GCP)

We are looking for an experienced and strategic Chief Financial Officer (CFO) to oversee the company’s financial operations, planning, and risk management. The CFO will play a key leadership role in driving financial performance, supporting business growth, and ensuring financial stability.

Key Responsibilities:

• Lead and manage all financial functions including accounting, budgeting, forecasting, and financial reporting
• Develop and execute financial strategies aligned with business goals
• Monitor cash flow, profitability, and financial performance
• Prepare and present financial reports to the CEO, Board of Directors, and stakeholders
• Ensure compliance with financial regulations, tax laws, and company policies
• Manage financial risk, audits, and internal controls
• Support strategic initiatives such as investments, mergers, and acquisitions
• Oversee relationships with banks, auditors, and financial institutions

Roles and Responsibilities:

1. Support Cybersecurity Assessments:

o Assist in conducting cybersecurity governance risk assessments for

applications.

o Help in the preparation and review of the Cybersecurity Governance

Assessment Questionnaire (CGAQ).

o Ensure all necessary information is collected and documented accurately.

o Provide guidance and support to ensure understanding and compliance with

cybersecurity requirements.

2. Issue and Exception Management:

o Track and follow up on issues and exceptions identified during assessments.

o Ensure timely closure of findings from assessments and audits.

o Document and report the status of issues and exceptions to relevant

stakeholders.

3. Documentation and Reporting:

o Assist in maintaining accurate records of assessments, issues, and exceptions.

o Maintain contact with with IT and Business to ensure customer satisfaction

Overview:

The Risk Manager will oversee the organization's risk management program, assessing and identifying risks that could impede the reputation, safety, security, or financial success of the organization.

Key Responsibilities:

1. Designing and managing the consumers' credit portfolio and risk within the desired target
2. Driving new experiments with deeper cust understanding and segmentation 
3. Leverage traditional and alternate data to create risk policies and ensure effective implementation 
4. Continuously plans, monitors, and reviews risk management and perform regular checking and/or surveillance to ensure that risk treatment is effective
5. Establish, implement and manage risk policy and control frameworks, ensuring that minimum standards, ownership and operation are documented and communicated across the Group
6. Manage a governance structure to monitor, challenge and test business compliance with risk policies and control frameworks
7. Develop, lead and maintain a center of expertise within 1st line risk management
8. Maintain comprehensive credit policy inventory and facilitate timely periodic review/approval of credit policies
9. Monitor and communicate new regulatory issues/guidance impacting credit policy, analyze the impact, interpret and implement into policy

Education and Experience:

1. Bachelor's degree in Risk Management, Finance, or related field required.
2. At least 7+ of related experience is preferred.
3. Strong knowledge and experience in risk management and policy 
4. Excellent verbal and written communication skills.
5. Excellent mathematical and critical thinking skills.
6. Excellent analytical and problem-solving skills.
7. Excellent organizational skills and attention to detail.
8. Strong supervisory and leadership skills

Following are some of our key solution offerings · Risk Based IT Internal Audit · IT SOX 404 Controls Testing, Quality Assurance · IT Attestation (SOC1/SOC2/ISAE 3402, ISAE 3000 etc.) · Internal Financial Controls related to IT General Controls · IT General Controls as part of Financial Statements Audits · IT Risk & Control Self-Assessment · Business Systems Controls / IT Application Controls · Auditing Emerging Technologies such as Cloud, Intelligent Automation etc. Position: Associate Consultants/ Consultants/ Assistant Managers Location: Bengaluru .

Responsibilities

Industry Experience: · Plan and execute the day-to-day activities of IT audit engagements for clients, including system development, package implementation, SSAE 16 readiness assessments, and/or platform reviews within multiple industries · Evaluate the design and effectiveness of technology controls throughout the business cycle · Identify and communicate IT audit findings to senior management and clients · Help identify performance improvement opportunities for assigned clients Additional Responsibilities for Assistant Managers: · Supervise associates and interns on engagements · Serve as a liaison between financial services clients and upper management

Qualifications

· Engineering / MBAs with atleast 3 years of experience · Preference would be given to significant experience in relevant technical knowledge: (a) financial statement – IT Audits; (b) SSAE 18/ ISAE 3402 audits; (c) IT SOX engagements (d) Emerging Technology Risks

· Certified Information Systems Auditor (CISA), COBIT Foundation, ITIL Foundation, CISSP, CRISC would be an added advantage · Possesses extensive experience in at least two of the key solutions of IT Audit & Assurance · Prior experience in client facing / account management roles · Possess strong domain knowledge, understanding of IT processes supporting business and possible risks in operations of at least two industry sectors · Strong analytical and problem solving skills · Strong written and verbal communication skills · Ability to work well in teams · Ability to work under pressure – stringent deadlines and tough client conditions which may demand extended working hours · Willingness to travel within India or abroad for continuous long periods of time · Demonstrate integrity, values, principles, and work ethic and lead by example

Qualifications & Responsibilities

Year of Experience : 3- 8 yrs

Location : Bangalore, Delhi, Mumbai, Pune

Work on ISO 27001 & NIST based Information Security Management System implementation and sustenance.

-          Responsible for SOX (IT Security Controls) and track the monthly/quarterly/annual control reports and drive effectiveness of SOX controls.

-          Work on Business Continuity Planning, IT Disaster Recovery as per ISO27001 & NIST requirements

-          Assess information security posture, identify the gaps/risks in the existing environment and develop solutions to mitigate the identified gaps/risk

-          Conduct Information Systems audits covering IT infrastructure assets

-          Working knowledge in security domains such as: security governance policies and procedures, risk management, compliance, access control, network security, security architecture, security incident response, disaster recovery, business continuity management, privacy and data protection

-          Experience in leveraging industry standards and frameworks such as ISO/IEC 27001, NIST CSF/800-171, etc.

-          Possesses certifications such as ISO27001 LA. CISSP, CISA certification- preferred

Why NCG?

WHO WE ARE DRIVES WHAT WE DO!

We Don't build the organization; we create an everlasting family. Our people express a sense of winning together when times are good and sticking together when times are tough.

Are you a Doer or Achiever?

Well, at NCG, our doors are Open for Doers and Achievers alike. We are a Cult where we create, innovate, learn and Contribute in a comfortable, transparent, and fair environment.

Joining NCG means contributing to a shared ambition for reliable work culture, tackling extraordinary technological challenges in multicultural teams, preserving your work/life balance, and more!

• 8-10 years of experience into IT SOX, IT Audits, ITGC testing
• Tech, M.Tech, BE, MBA or similar qualification.
• CISA (Certified Information Systems Auditor), Certified Internal Auditor (CIA), Certified Risk and Information Systems Control (CRISC), or similar professional certification preferred.
• Firm understanding of information technology, including IT process, IT general controls, as well as COSO and COBIT frameworks.
• Good technical knowledge of Application security and Access Management
• Hands-on experience on Excel, PowerPoint, PowerBI, etc.

The Risk team is responsible for overall risk framework and strategy for the organization. The team develops various risk models, arrives at various sector reports from a risk perspective and provides in depth analysis and recommendation around risk profiles of various clients.

In this role, the person is responsible for playing a leadership role in the Risk function to identify, assess, monitor and make timely and measured judgments on all current and potential future risks faced, in order to protect the organization’s interest, assets and reputation of the group along with growing shareholder value and profitability.

Responsibilities

• Manage risk for the retail and wholesale portfolio. Should have managed organization level Risk Policies, Credit Underwriting and Collection functions.
• Manage risk framework for the organization - including updating, establishing new risk management mechanisms, to identify, assess, monitor, measure and control a broad spectrum of risks. Ensure all policies and frameworks are kept updated and deployed to the optimum level.
• Develop continuous monitoring and improvement of the quality of the organization's credit and lending portfolio through credit policy direction and implementation.
• Possess a complete understanding the business. Evaluate, improve, and monitor the business, including assisting in reporting to the Board and Board Committees and providing leadership in the effectiveness of credit risk management controls, systems, and processes across the organization.
• Lead and mentor a team of analysts.

• Possess 7+ years of relevant experience in financial services industry in a risk role.
• Exposure to both wholesale and retail risk in a banking environment will be preferred. Some experience in a business / sales role within the banking / NBFC space will be an added advantage.
• Should have held a position of authority in terms of allocation and appropriating limits.
• Sector understanding in financial institution space and good knowledge of interpreting financial trends.
• High proficiency in Python and SQL/NoSQL.
• Experience with big data and cloud computing e.g., PySpark, data lake is a plus.
• Outstanding written, verbal and interpersonal communication skills.
• Ability to speak at various levels of an organization (CXOs to analysts).
• Have demonstrated resilience – stayed with companies and taking businesses to scale, have preferably not ‘hopped jobs. Strong organizational skills and excellent follow-through.
• Present / articulate / position an idea compellingly and ability to work in a fast-paced dynamic environment.
• Excellent communication and presentation skills.
• Takes personal ownership; Self-starter; Ability to drive projects with minimal guidance and focus on high impact work.
• Learns continuously; Seeks out knowledge, ideas and feedback.

Security Monitoring and Operations (SIEM)
Security Solutions design and deployment
IDAM - Identity and Access Management Experience
Network Monitoring and Management Experience
VAPT - Vulnerability Assessment and Penetration Assessment
Experience on DLP and Endpoint Security
Knowledge on Encryption 
Experience in performing Maturity Assessment for identifying the security gaps and recommending measures to fix the gaps
Experience in Audit controls and applying security measures (ISO, PCI etc..)
Knowledge in automation and scripting