Senior Engineer– Digital Risk Management

Overview

Lead enterprise IT risk identification, assessment, governance, monitoring, and reporting. The role owns risk governance while guiding analysts and coordinating with subject-matter experts and risk owners.

What you'll do

• Design and maintain the IT Risk Management Framework aligned with NIST CSF and ISO 27001.
• Define risk taxonomies, thresholds, escalation protocols, registers, scoring models, and heatmaps.
• Conduct and oversee inherent and residual risk assessments across applications, infrastructure, and projects.
• Define KRIs and KCIs, evaluate control effectiveness, and monitor remediation plans.
• Manage risk exceptions, waivers, deviations, and related workflows.
• Prepare risk dashboards and present insights to senior leadership, the Risk Council, and DCC.
• Develop training, promote risk awareness, and mentor IT Risk Analysts.

What you'll need

• 8–10 years of experience in IT risk management, audit, or cyber governance.
• Bachelor's degree in Computer Science or a related field.
• Knowledge of NIST, ISO 27001, COBIT, internal controls, and security policies.
• Hands-on experience with ServiceNow IRM/GRC, RSA Archer, or other GRC platforms.
• Working knowledge of NIST AI RMF and ISO/IEC 42001.
• Ability to coordinate cross-functional and multi-country risk engagements.
• Ability to use AI tools to build lightweight risk-reporting apps, dashboards, or chatbots.

Nice to have

• CRISC certification.

Details

• Location: Hyderabad, Telangana, India; the source also lists Bangalore.