Role and Responsibilities

- ITSM Control Assessment Execution: Plan and execute ITSM control assessments within an assigned scope of Incident, Change, and Problem Management processes. Perform assessments in alignment with established policies, standards, and control testing methodologies, under the guidance of senior leadership.
- Control Design and Operating Effectiveness Evaluation: Evaluate the design and operational effectiveness of ITSM controls to identify gaps, execution weaknesses, and process deviations. Clearly articulate root causes, control impacts, and associated technology risk implications. Validate that controls are: Appropriately defined and documented; Consistently executed by process owners; Supported by complete, accurate, and reliable evidence.
- Risk Advisory and Issue Support: Provide risk-based advisory guidance to control and process owners on identified control weaknesses. Support the documentation, classification, and escalation of issues arising from assessments. Advise on appropriate risk treatment options including remediation, risk acceptance, or escalation in accordance with Technology Risk and IT Risk Management standards.
- Assessment Documentation and Tooling: Ensure assessment results, evidence, and supporting artifacts are accurately documented and maintained in ServiceNow / Integrated Risk Management (IRM) tools. Adhere to documentation standards to support transparency, auditability, and reuse for future assessments.
- Stakeholder Engagement and Communication: Engage with ITSM process owners, technology teams, and risk stakeholders to explain assessment results, control gaps, and risk impacts in a transparent and practical manner.



Contribute to working sessions, governance forums, and RCSA readiness discussions by providing timely updates and insights relevant to ITSM risk posture.
- Trend Analysis and Continuous Improvement: Identify recurring issues, themes, and systemic control weaknesses across assessments. Provide recommendations to enhance control design, process execution, and testing approaches. Contribute to continuous improvement of ITSM control frameworks and readiness for audits and regulatory reviews.
- Standards and Industry Awareness: Maintaining working knowledge of ITSM, control, and technology risk best practices, including relevant industry standards. Apply this knowledge to assessments and advisory discussions to ensure alignment with evolving expectations.

Knowledge and Experience

Bachelors degree in computer science, Information Technology, or a related discipline, with typically 5-7 years of experience in technology risk, controls, ITSM, or security-related roles. Strong practical knowledge of ITSM processes and control environments, with the ability to assess risk and control effectiveness. Demonstrated analytical skills, sound judgment, and the ability to communicate complex risk concepts clearly to technical and non-technical stakeholders. Experience working collaboratively with IT teams, risk partners, auditors, and vendors. Preferred certifications: ITIL Foundation, CISA, CISSP, or CRISC.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Associate, Cyb Sec IT RiskM (Pune)
🏢 Northern Trust
📍 Pune