- We are seeking an experienced professional with strong expertise in RCSA, Inherent Risk Rating (IRR) / Risk Assessments, and Control Governance & Standard Uplift, with demonstrated knowledge of regulatory and control frameworks such as NIST, DORA, ISO 27001, and related standards
- The role will lead end-to-end risk and control assessments, evaluate inherent and residual risks, assess control design and effectiveness, and ensure alignmentwith enterprise risk frameworks, risk appetite, and regulatory expectations
- The incumbent will drive control governance, control testing, and standard uplift initiatives, support audits and regulatory reviews, deliver clear risk reporting and KRIs, and partner with business stakeholders to embed robust risk culture and consistent control standards across processes

Key Responsibilities

- RCSA (Risk & Control Self-Assessment)Lead and coordinate the end-to-end RCSA process across business units or functions
- Facilitate risk identification, risk rating, control design evaluation, and control testing
- Ensure RCSA documentation is accurate, complete, and aligned with enterprise risk frameworks
- Challenge business inputs to ensure completeness and reasonableness of risks and controls
- Track remediation activities for identified gaps, control failures, or process risks
- IRR Assessments (Risk Assessment)Perform Inherent Risk Rating (IRR) / Risk Assessments for new and existing processes, products, andinitiatives
- Assess risk severity across dimensions such as impact, likelihood, and complexityEnsure accurate differentiation between inherent, residual, and target risk statesApply standardized risk taxonomies and rating methodologies consistently
- Challenge risk assessments and assumptions through data-driven analysisSupport change governance and material risk change assessments




- Ensure risk assessments align with enterprise risk appetite and tolerance levelsControl Governance & Standard UpliftSupport and enhance control governance frameworks across the organizationConduct periodic control health checks, control testing, and evidence reviews
- Monitor control effectiveness, perform control design assessments, and recommend improvements
- Ensure consistency of control standards across processes and support rollout of new controls
- Partner with cross-functional teams to embed control-thinking into process redesign initiatives
- Drive control standard uplift initiatives to improve consistency and sustainabilityReview and update control standards, procedures, and control libraries
- Stakeholder Management & Risk Culture
- Work closely with process owners, control owners, and risk champions to build awareness
- Conduct training sessions and workshops on RCSA, controls, and risk frameworks
- Promote a strong risk culture through continuous engagement and capability buildingGovernance, Compliance & Audit SupportSupport internal, external, compliance, and regulatory audits by providing documentation and evidence
- Ensure adherence to internal risk governance policies, frameworks, and regulatory guidelines
- Assist in policy development, updates, and implementation of risk governance standards
- Follow through on control issues until effective closure and verify sustainability of remediation actions
- Risk Monitoring & ReportingPrepare risk dashboards, heat maps, and periodic risk and control reports for leadership
- Maintain risk registers, control catalogs, and issue logs with high data quality
- Track Key Risk Indicators (KRIs) and ensure timely escalations for threshold breaches
- Support regulatory, compliance, and audit reporting requirements

Qualification:

- knowledge of regulatory and control frameworks such as NIST, DORA, ISO 27001, and related standards
- The role will lead end-to-end risk and control assessments, evaluate inherent and residual risks, assess control design and effectiveness, and ensure alignment with enterprise risk frameworks, risk appetite, and regulatory expectatio

📌 ERM Enterprise Risk Management Professional (Karnataka)
🏢 Contactx Resource Management
📍 Karnataka