Risk Analyst

Overview

The Risk Analyst embeds cyber and IT risk management into technology delivery and operations at Chevron ENGINE in Bengaluru, working with product teams, architects, engineering leaders and security stakeholders to identify and assess risks early without slowing business outcomes. The role reports into the IT Risk Manager at Chevron Engine, India.

What you'll do

• Perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models, and third‑party integrations.
• Engage early with architects, engineers, and product teams to embed secure‑by‑design and risk‑based decisions into solution design.
• Support security incidents, risk exceptions, and remediation efforts, including business justification reviews and action tracking.
• Act as the primary risk contact for assigned technology or business areas, providing clear guidance and regular risk status updates.
• Deliver risk and security awareness sessions, process walkthroughs, and targeted enablement for technical and non‑technical stakeholders.
• Maintain risk metrics, dashboards, and tracking artefacts, and contribute to continuous improvement of risk processes and ways of working.

What you'll need

• Minimum 3-5 years of experience in IT Risk Management, Cybersecurity, Information Security, or related domains.
• Practical experience conducting risk assessments, architecture/security reviews, and remediation tracking.
• Strong working knowledge of industry-standard frameworks (e.g. ISO 27001, NIST, CIS Controls, risk management frameworks).
• Experience analyzing risks related to data platforms, data visualization tools, AI agents, and emerging AI technologies, with awareness of MCP servers and associated security, privacy, and governance risks.
• Experience working in large, complex IT or digital environments with multiple stakeholders.

Nice to have

• Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor (preferred or in progress) would be advantageous.
• Strong analytical and risk evaluation skills.
• Ability to influence technical and business stakeholders without direct authority.
• Strong communication skills, with the ability to confidently engage diverse stakeholders and convey risk in clear, business‑relevant terms.
• High ownership, accountability, and execution discipline.
• Pragmatic mindset with the ability to balance risk, security, and delivery speed with business expectations in mind.

Details

• Location: Bengaluru, Karnataka, India.
• Standard work week Monday to Friday.
• Working hours are 8:00am to 5:00pm or 1:30pm to 10:30pm.
• Chevron regrets that it is unable to sponsor employment visas or consider individuals on time-limited visa status for this position.