Sr Associate, Cyb Sec IT RiskM

Overview

Specialized technology risk advisory role supporting ITSM processes (Incident, Change, and Problem Management), acting as a trusted risk partner to ITSM process owners on control assessment, gap identification, and risk treatment.

What you'll do

• Plan and execute ITSM control assessments within an assigned scope of Incident, Change, and Problem Management processes, under the guidance of senior leadership.
• Evaluate the design and operational effectiveness of ITSM controls to identify gaps, execution weaknesses, and process deviations.
• Articulate root causes, control impacts, and associated technology risk implications.
• Validate that controls are appropriately defined and documented, consistently executed by process owners, and supported by complete, accurate, and reliable evidence.
• Provide risk-based advisory guidance to control and process owners on identified control weaknesses.
• Support the documentation, classification, and escalation of issues arising from assessments.
• Advise on risk treatment options, including remediation, risk acceptance, or escalation, in accordance with Technology Risk and IT Risk Management standards.
• Ensure assessment results, evidence, and supporting artifacts are accurately documented and maintained in ServiceNow / Integrated Risk Management (IRM) tools.
• Engage with ITSM process owners, technology teams, and risk stakeholders to explain assessment results, control gaps, and risk impacts.
• Contribute to working sessions, governance forums, and RCSA readiness discussions.
• Identify recurring issues, themes, and systemic control weaknesses across assessments, and recommend enhancements to control design, process execution, and testing approaches.
• Maintain working knowledge of ITSM, control, and technology risk best practices, including relevant industry standards.

What you'll need

• Bachelor's degree in computer science, Information Technology, or a related discipline.
• Typically 5–7 years of experience in technology risk, controls, ITSM, or security-related roles.
• Strong practical knowledge of ITSM processes and control environments, with the ability to assess risk and control effectiveness.
• Demonstrated analytical skills, sound judgment, and the ability to communicate complex risk concepts clearly to technical and non-technical stakeholders.
• Experience working collaboratively with IT teams, risk partners, auditors, and vendors.

Nice to have

• Preferred certifications: ITIL Foundation, CISA, CISSP, or CRISC.

Details

• Location: Pune, India.