Senior Risk Analyst

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Risk Analyst based in India.** This role offers the opportunity to build and mature a modern risk management function within a fast-growing, technology-driven environment. You will help shape a forward-looking security and operational risk framework designed for an AI-enabled organization. The position combines strategic thinking, technical expertise, and hands-on execution to transform risk management from a reactive process into a proactive business capability. You will own key risk initiatives, develop quantitative risk methodologies, and create actionable insights for stakeholders across engineering, product, legal, and leadership teams. The role requires an AI-native mindset, leveraging automation and data-driven approaches to improve risk visibility and decision-making. You will play a key role in defining how organizations measure, communicate, and manage risk in the evolving AI landscape. ### Accountabilities: - Design, implement, and continuously mature an enterprise risk management program, including risk taxonomy, scoring methodologies, risk appetite statements, escalation processes, and alignment with industry frameworks such as ISO 27005, NIST RMF, and ISO 31000. - Build and maintain an enterprise risk register as a dynamic operational tool, ensuring risks are accurately identified, assigned to owners, prioritized, tracked, and remediated. - Lead risk identification workshops with cross-functional teams including engineering, product, legal, and business stakeholders to uncover emerging risks and improve risk visibility. - Develop AI-enabled risk workflows by leveraging automation, threat intelligence tools, and data analysis techniques to identify trends, accelerate reporting, and improve risk monitoring. - Support third-party risk management activities by contributing to vendor assessments, risk scoring, documentation, and alignment with broader enterprise risk practices. - Assess and manage emerging AI-related risks, including privacy concerns, model security, algorithmic bias, explainability challenges, AI misuse, and regulatory requirements. - Create executive-ready risk reports, dashboards, and summaries that translate technical findings into clear business impacts for leadership teams. - Partner with teams across the organization to embed risk management practices into operational processes, technology adoption, and continuous improvement initiatives. - Improve risk measurement through quantitative approaches, key risk indicators (KRIs), live data sources, dashboards, and reporting pipelines. - Ensure security and compliance controls are documented, tested, and supported by reliable evidence generated through scalable processes and integrations. ## Requirements: - 6+ years of experience in governance, risk, compliance (GRC), information security, risk management, or IT audit roles, preferably within SaaS, cloud-native, or technology-focused environments. - Strong knowledge of security and compliance frameworks including SOC 2, ISO 27001, NIST Cybersecurity Framework, CIS Controls, and related risk management standards. - Experience building or significantly improving risk programs, including risk registers, scoring models, control frameworks, and quantitative risk measurement approaches. - Demonstrated ability to use AI tools, automation, or data solutions to improve risk analysis, reporting, evidence gathering, and operational workflows. - Experience working with GRC platforms such as Drata, Vanta, AuditBoard, ServiceNow GRC, or equivalent solutions. - Familiarity with cloud platforms such as AWS, Azure, or Google Cloud and related security technologies including CSPM, SIEM, and identity management tools. - Experience supporting security, privacy, or compliance audits, including evidence collection, control walkthroughs, and auditor collaboration. - Ability to translat…