Key Responsibilities and DutiesSupport risk evaluations.
Maintain accurate records in GRC tools.
Contribute to playbooks, templates, and process improvements.

Educational Requirements
Vocational and/or Technical Education Preferred

Work Experience
3+ Years Required; 5+ Years Preferred

Physical Requirements
Physical Requirements: Sedentary Work

Career Level
4IC

Expectations:
Deliver assessment results on time with clear documentation.
Communicate risks in simple, business friendly language.
Ask the right questions when requirements are unclear.
Continuously improve technical and risk knowledge.
Maintain confidentiality and data handling discipline.

Non-Negotiables:
Solid integrity and ethical judgment.
Adherence to defined assessment methodology.
Explicit and timely communication of risks.
Willingness to learn core security concepts within the first 90 days.

Required Skills:
Knowledge of common vulnerabilities such as those in OWASP Top 10.
Familiarity with authentication and access control concepts.




Ability to read and understand technical documentation.
Solid analytical and problem-solving ability.
Good written and verbal communication.
Working knowledge of Excel and documentation tools.

Preferred Skills:
Exposure to secure SDLC practices.
Understanding of cloud basics in AWS, Azure, or GCP.
Familiarity with risk frameworks like NIST CSF 2.0 or ISO 27001.
Experience with any GRC tool.
Internship or project experience in cybersecurity.

Related Skills

Business Acumen, Business Process Improvement, Business Process Understanding, Communication, Compliance, Continuous Improvement Mindset, Detail-Oriented, General Risk Management, Influence, Relationship Management, Risk Mitigation, Risk Monitoring
Company Overview

TIAA Global Capabilities was established in 2016 with a mission to tap into a vast pool of talent, reduce risk by insourcing key platforms and processes, as well as contribute to innovation with a

📌 Analyst Business Risk Controls Management Pune
🏢 TIAA
📍 Pune