Digital Risk Consultant
- Full Time
About the role
๐ง๐ต๐ถ๐ ๐ฟ๐ผ๐น๐ฒ ๐ถ๐ ๐ณ๐ผ๐ฟ ๐ผ๐ป๐ฒ ๐ผ๐ณ ๐๐ต๐ฒ ๐ช๐ฒ๐ฒ๐ธ๐ฑ๐ฎ๐'๐ ๐ฐ๐น๐ถ๐ฒ๐ป๐๐
๐ฆ๐ฎ๐น๐ฎ๐ฟ๐ ๐ฟ๐ฎ๐ป๐ด๐ฒ: ๐ฅ๐ ๐ญ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ - ๐ฅ๐ ๐ฎ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ (๐ถ๐ฒ ๐๐ก๐ฅ ๐ญ๐ฌ-๐ฎ๐ฌ ๐๐ฃ๐)
Experience: 5+ yrs
Location: Bengaluru, Hyderabad
As a Digital Risk Consultant, you will be responsible for assessing and mitigating risks associated with third-party vendors and information security across multiple industries, ensuring robust cyber resilience through data-driven insights and AI-enabled risk evaluation. You will work closely with stakeholders to develop and implement comprehensive vendor risk frameworks, aligning security controls with regulatory requirements and emerging threat landscapes. Leveraging advanced cybersecurity threat intelligence, you will proactively identify, analyze, and monitor external risks that could impact business continuity and reputation. Your strategic guidance will enable organizations to prioritize risk mitigation efforts, reduce exposure, and achieve measurable improvements in their overall security posture.
Requirements
๐๐ฒ๐ ๐ฅ๐ฒ๐๐ฝ๐ผ๐ป๐๐ถ๐ฏ๐ถ๐น๐ถ๐๐ถ๐ฒ๐
โข Conduct thorough third-party risk management assessments, mapping vendor relationships to critical assets and compliance obligations.
โข Lead vendor cybersecurity risk assessments, evaluating scope, controls, and compliance with industry standards such as ISOโฏ27001, NIST, and SOCโฏ2.
โข Design, implement, and maintain information security risk assessment programs, ensuring timely identification of vulnerabilities and remediation.
โข Develop AI-enabled vendor risk evaluation models to automate data collection, scoring, and predictive risk analysis.
โข Perform continuous cybersecurity threat intelligence gathering, trend analysis, and threat modeling to inform risk mitigation strategies.
โข Establish external risk monitoring processes, using feeds from threat intelligence platforms, open-source intelligence, and government alerts.
โข Collaborate with legal, compliance, and business units to create riskโaware policies, contractual clauses, and dueโdiligence checklists.
โข Deliver executiveโlevel risk dashboards and reports, translating technical findings into actionable insights for senior leadership.
โข Facilitate vendor risk workshops, training sessions, and CSF development to build a culture of security accountability.
โข Stay abreast of emerging regulations, technologies, and best practices in digital risk and cyber risk management to continuously enhance program effectiveness.
๐ช๐ต๐ฎ๐ ๐ ๐ฎ๐ธ๐ฒ๐ ๐ฌ๐ผ๐ ๐ฎ ๐๐ฟ๐ฒ๐ฎ๐ ๐๐ถ๐
โข 5+ years of experience in thirdโparty risk management, vendor cybersecurity assessment, or information security risk assessment roles.
โข Proven expertise with AI/ML techniques for risk analysis, risk scoring, or threat intelligence enrichment.
โข Strong knowledge of cybersecurity frameworks (NIST, ISOโฏ27001, SOCโฏ2, PCIโDSS) and regulatory requirements relevant to digital assets.
โข Demonstrated ability to design, implement, and maintain risk monitoring tools and dashboards for executive visibility.
โข Excellent analytical capabilities, with experience in risk scoring methods, data analytics, and risk models.
โข Excellent communication skills, with a track record of presenting complex security risk findings to nonโtechnical stakeholders.
โข Ability to work independently and collaboratively in a fastโpaced, multiโregion environment spanning Bengaluru, Hyderabad, and beyond.
โข Proficiency in leveraging cybersecurity threat intelligence platforms (e.g., Recorded Future, ThreatConnect, Anomali).
โข Familiarity with contract negotiation and vendor compliance program development.
โข A continuous improvement mindset, actively seeking to refine risk frameworks and incorporate emerging technologies.