Overview
Manager-level role leading delivery of Non-Financial Risk Management (NFRM) work for a large global insurance company, focused on Risk and Control assessment (RCA) and control testing, and overseeing a team of Consultants and Senior Consultants.
What you'll do
- Execute and own end-to-end RCAs across complex non-IT risk areas such as fraud, Payroll, AP, AR, Procurement, HR, sanctions governance, mis-selling, product governance, regulatory change, third-party risk, and claims or underwriting failures.
- Apply professional judgement to assess risk impact, control sufficiency, and residual risk.
- Ensure RCA outcomes are defensible, consistent, and aligned to business reality.
- Research and identify emerging non-IT risks and embed them into RCA frameworks and workshop agendas.
- Integrate RCA outcomes into testing scope and control focus areas.
- Own end-to-end control testing execution for complex non-IT processes including financial crime controls, conduct controls, third-party governance, claims and underwriting processes, and reporting accuracy.
- Define testing approaches, sampling strategies, and evidence expectations.
- Personally execute judgement-heavy tests and conclude on design and operating effectiveness.
- Assess exceptions and perform first-level conclusions on operating effectiveness.
- Drive remediation discussions with business stakeholders for control failures.
- Plan end-to-end delivery, allocate resources, engage stakeholders, and maintain delivery rigor.
- Lead, review and govern the work of Consultants and Senior Consultants to ensure high-quality execution.
What you'll need
- Bachelor's degree required.
- Relevant experience in non-IT risk management, internal audit, compliance, or control assurance roles in Insurance or other BFSI, or demonstrated hands-on experience executing RCAs/control testing across complex business processes.
- Strong subject matter expertise and the ability to operate independently within a global risk environment.
- Professional certification such as CA, CPA, CIA, CFE, or MBA typically expected.
- English language proficiency: Proficient - C2.
Nice to have
- Postgraduate degree in Finance, Risk, Business, or Management.
- Strong understanding of financial crime, conduct, regulatory, operational and governance risk frameworks.
- Experience in Internal Audit, SOX / ICFR testing, Risk & Compliance Control Testing Review / People Management, or Shared Services / GBS audit or assurance teams.
- Certifications such as Certified Fraud Examiner (CFE), CISA, ITIL 4 Foundation, or Microsoft Certified: Azure Security Engineer Associate.
- Skills: Artificial Intelligence (AI), Data Literacy, Executive Presence, Information Security, Program Management, Risk Management, Storytelling.
Details
- Location: Gurgaon (Enterprise Risk Consulting, FF, 22B).
- Work mode: Hybrid.
- Work shift: Day Job (India).
- Job type: Regular.
Read the full description and apply on the company’s own careers page.