Data Risk Consultant | Assurance Tech Advisory | Controls

Location: Bengaluru

Experience: Exactly 6 Years

Employment Type: Full-time

Work Mode: Hybrid

CTC: 20–25 LPA, based on current CTC

About the Role

We are looking for an experienced Data Risk Consultant to join the Assurance – Tech Advisory team. The role focuses on Digital Risk, Technology Risk, Cybersecurity Risk, IT Risk Management, Risk & Compliance, and Controls across enterprise technology environments.

The ideal candidate will have a strong Digital Risk & Compliance / Security Risk background with hands-on experience in RCSA, risk assessments, controls testing, ITGC, cybersecurity risk, compliance, governance, and remediation.

Key Responsibilities

- Lead and support Digital Risk and Technology Risk assessments across applications, cloud platforms, digital products, and technology environments.
- Conduct Risk and Control Self-Assessments (RCSA) to identify, assess, and mitigate technology, operational, and cybersecurity risks.
- Evaluate the design and operating effectiveness of controls through control testing and risk validation.
- Assess digital transformation initiatives, emerging technologies, and system implementations for associated risk exposures.
- Identify control gaps, document findings, and recommend practical remediation plans.
- Support the development and maintenance of risk frameworks, methodologies, policies, and standards.
- Collaborate with business, technology, cybersecurity, compliance, and audit stakeholders.
- Monitor risk issues, compliance gaps, action plans, and remediation activities through governance processes.
- Conduct regulatory and compliance assessments for technology and digital environments.
- Prepare risk reports, dashboards, metrics, and presentations for governance committees and senior stakeholders.
- Evaluate third-party and vendor technology risks.
- Support sustainable control environments aligned with enterprise risk management objectives.




- Participate in internal and external audits and support closure of audit findings.
- Provide advisory support across technology risk, cybersecurity risk, operational resilience, and digital governance.

Mandatory Skills & Experience
- Exactly 6 years of professional experience in Digital Risk, Technology Risk, Cybersecurity Risk, IT Risk Management, Operational Risk, or closely related risk/security functions.
- Strict Digital Risk & Compliance / Security Risk background is mandatory.
- Strong understanding of Technology Risk Management, Digital Risk, and Cybersecurity Risk principles.
- Hands-on experience with RCSA, control design reviews, and controls testing.
- Enterprise-level risk/security experience is mandatory.
- Understanding of IT General Controls (ITGC), application controls, access management, and change management.
- Familiarity with cybersecurity domains such as:
- Identity & Access Management

- Vulnerability Management

- Incident Management

- Data Protection
- Experience managing risk issues, control gaps, compliance gaps, and remediation programs.
- Knowledge of enterprise risk and control frameworks such as:

- NIST

- ISO 27001

- COBIT

- COSO

- CIS Controls
- Understanding of regulatory, compliance, governance, and industry requirements impacting technology and digital environments.
- Robust stakeholder management, analytical, documentation, and communication skills.

Preferred Certifications Relevant certifications such as CISA, CISM, CRISC, CISSP, ISO 27001, COBIT, or other Technology Risk / Cybersecurity / GRC certifications will be an advantage.

Candidate Profile

We are looking for candidates with a demonstrated enterprise-level Digital Risk, Technology Risk, Cybersecurity Risk, IT Risk Management, or Risk & Compliance background.

Candidates from purely technical cybersecurity, SOC, generic IT Audit, general compliance, or unrelated operational/business risk backgrounds without strong Digital/Technology Risk and Controls exposure will not be considered.

📌 Data Risk Consultant (Bengaluru)
🏢 WSNE Consulting
📍 Bengaluru