Job Title:  Data Risk Consultant | Assurance - Tech Advisory | Bengaluru | Controls

The team

The Digital Risk team is seeking experienced Digital Risk Consultants to help organizations identify, assess, and manage technology, cyber, and operational risks across digital ecosystems. The ideal candidate will have strong experience in risk management, controls assessment, regulatory compliance, and remediation activities to enhance overall business resilience and risk posture.

Your work profile

• Lead and support Digital Risk assessments across applications, cloud platforms, digital products, and technology environments.
• Perform Risk and Control Self-Assessments (RCSAs) to identify, assess, and mitigate operational, technology, and cyber risks.
• Evaluate the design and operating effectiveness of key controls through controls testing and risk validation activities.
• Assess digital transformation initiatives, emerging technologies, and system implementations for associated risk exposures.
• Identify control gaps, document findings, and recommend practical remediation plans to mitigate identified risks.
• Support the development and maintenance of risk frameworks, methodologies, policies, and standards.
• Collaborate with business, technology, cybersecurity, compliance, and audit teams to ensure effective risk management practices.
• Monitor and track risk issues, action plans, and remediation activities through established governance processes.
• Conduct regulatory compliance assessments and evaluate adherence to applicable regulatory and industry requirements.
• Support governance committees by preparing risk reports, dashboards, metrics, and executive-level presentations.
• Evaluate third-party and vendor risks associated with digital platforms and technology services.
• Assist in developing sustainable control environments aligned with enterprise risk management objectives.
• Participate in internal and external audits and support remediation of audit findings.
• Provide advisory services on technology risk, cybersecurity risk, operational resilience, and digital governance practices.

Key skills required: 

• 6+ years of experience in Digital Risk, Technology Risk, Cybersecurity Risk, IT Risk Management, or Operational Risk.
• Strong understanding of Technology Risk Management, Digital Risk, and Cybersecurity Risk principles.
• Hands-on experience conducting Risk and Control Self-Assessments (RCSA), control design reviews, and controls testing.
• Experience working with enterprise risk and control frameworks such as NIST, ISO 27001, COBIT, COSO, and CIS Controls.
• Knowledge of regulatory, compliance, and governance requirements impacting technology and digital environments.
• Experience managing risk issues, compliance gaps, and remediation programs.
• Understanding of IT General Controls (ITGC), application controls, access management, and change management processes.
• Familiarity with cybersecurity domains including identity and access management, vulnerability management, incident management, and data protection.