Senior Risk Analyst

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Risk Analyst based in India.** This role offers a unique opportunity to help build and shape a next-generation risk management function within a fast-growing, technology-driven environment. As a senior member of the security and governance team, you will design and mature risk frameworks that address information security, operational resilience, and emerging AI-related risks. You will leverage data, automation, and AI-enabled methodologies to transform risk management into a proactive and business-focused discipline. Working closely with engineering, legal, product, and leadership teams, you will provide actionable insights that influence strategic decision-making and strengthen organizational resilience. This position is ideal for professionals who enjoy building programs from the ground up and are passionate about modern, data-driven approaches to enterprise risk management. ### Accountabilities: - Design, implement, and continuously mature a comprehensive enterprise risk management framework, including risk taxonomies, scoring methodologies, risk appetite definitions, and escalation processes. - Build and maintain the enterprise risk register as a dynamic operational tool, ensuring risks are accurately documented, assigned, tracked, and regularly updated. - Facilitate risk identification workshops with cross-functional stakeholders to uncover emerging risks and drive effective mitigation strategies. - Develop AI-assisted workflows to monitor threat landscapes, analyze risk trends, automate reporting processes, and enhance risk visibility across the organization. - Assess and manage risks related to artificial intelligence technologies, including model governance, privacy concerns, third-party dependencies, and regulatory compliance requirements. - Support third-party risk management activities, including vendor assessments, risk scoring, and alignment of external risks with enterprise risk frameworks. - Produce executive-level dashboards, reports, and risk summaries that translate technical findings into business impact and actionable recommendations. - Develop and monitor Key Risk Indicators (KRIs) and establish reporting mechanisms connected to live data sources for real-time risk insights. - Provide advisory support on process improvements, technology implementations, remediation initiatives, and security governance activities. - Partner with technical and business teams to embed risk management practices into day-to-day operations and strategic initiatives. - Contribute to audit readiness activities, evidence management, and compliance initiatives across security and privacy domains. ## Requirements - Minimum of 6 years of experience in Governance, Risk, and Compliance (GRC), information security, enterprise risk management, or IT audit, preferably within SaaS, cloud-native, or technology-driven environments. - At least 4 years of hands-on experience building or significantly maturing risk management programs, including risk registers, scoring methodologies, and quantitative risk practices. - Strong knowledge of security and compliance frameworks, including SOC 2, ISO 27001, NIST CSF, CIS Controls, and familiarity with ISO 31000, ISO 27005, ISO 42001, and NIST AI RMF. - Demonstrated experience leveraging AI tools, automation platforms, or data analytics solutions to improve risk analysis, reporting, and workflow efficiency. - Experience developing Key Risk Indicators (KRIs), quantitative risk models, and data-driven reporting frameworks that support executive decision-making. - Proficiency with GRC platforms such as Drata, Vanta, AuditBoard, ServiceNow GRC, or similar solutions. - Working knowledge of cloud environments (AWS, Azure, or GCP) and related security technologies, including SIEM, identity management, and cloud security posture tools. - Experience supporting security and p…