Senior Engineer - IT Risk Management

Overview

Senior Engineer in IT Risk Management within Marsh’s Global Information Security (GIS) team in Pune, supporting third-party risk management and technical risk assessments.

What you'll do

• Review security questionnaires, documentation, and evidence from vendors to support third-party risk assessments.
• Track third-party risk findings, remediation actions, and follow-up activities.
• Evaluate vendor control environments against internal requirements and risk standards.
• Review technical documentation, architecture summaries, and control evidence to identify potential risk concerns.
• Support technical risk assessments for infrastructure, applications, cloud, or endpoint environments as needed.
• Maintain risk records, trackers, dashboards, and reporting materials for leadership and stakeholders.

What you'll need

• Experience in third-party risk, IT risk, cybersecurity, audit, compliance, or a related field.
• Basic understanding of cybersecurity, IT risk, and third-party risk management concepts.
• Strong analytical skills and attention to detail.
• Ability to compare documentation to requirements and identify basic gaps or concerns.
• Strong written and verbal communication skills.
• Comfort working with spreadsheets, trackers, and reporting tools.

Details

• Hybrid role requiring at least three days per week in the office.