Risk Assessment Officer

Role Associate / Specialist

Location : Mumbai

Minimum 2+ years of hands-on experience in Governance, Risk and Compliance roles.

Good understanding of IS principles, controls and risk management methodologies, compliance, and audit. Request if you can on priority also share the commercials so that we can run it through Shivani and the procurement teams.

Job Description:

• Conduct internal assessment, risk assessments and review of IT, OT processes and recommend action for improving IT governance maturity using reference frameworks like ISO 27001/NIST framework/TISAX.
• Ensure compliance with organizational information Security policies and procedures
• Perform regular checks and KRI on security tool.
• Responsible to monitor and manage security related nonconformities.
• Conduct risk assessments to identify, evaluate and prioritize risks related to information security and business operations.
• Support external audits by preparing documentation, coordinating audit activities, and ensuring compliance with cybersecurity policies and standards.
• Work closely with IT, legal and other business stakeholders to integrate IS risk management into business processes ensuring alignment with organizational goals.
• Contribute to the development of IS policies, procedures and guidelines and assist in delivering training programs to raise awareness of security best practices across the organization.
• Maintain clear and comprehensive documentation of risk assessments , compliance activities , audits, and incident reports to provide transparency to senior leadership and regulatory bodies.

Mandatory Skill

• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills
• Ability to influence and work collaboratively across departments
• Proficiency in GRC tools and software