Role & responsibilities The position combines hands-on risk execution with strong stakeholder engagement, focusing on architecture risk assessments, security assurance, incident support, remediation tracking, and awareness enablement. The role is well-suited for a skilled who can balance security rigour with delivery pragmatism in large, complex technology environments.

- Perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models, and thirdparty integrations.

- Engage early with architects, engineers, and product teams to embed securebydesign and riskbased decisions into solution design.

- Support security incidents, risk exceptions, and remediation efforts, including business justification reviews and action tracking.

- Act as the primary risk contact for assigned technology or business areas, providing clear guidance and regular risk status updates.

- Maintain risk metrics, dashboards, and tracking artefacts,



and contribute to continuous improvement of risk processes and ways of working.

Preferred candidate profile

- Strong analytical and risk evaluation skills.

- Ability to influence technical and business stakeholders without direct authority.

- Strong communication skills, with the ability to confidently engage diverse stakeholders and convey risk in clear, businessrelevant terms.

- High ownership, accountability, and execution discipline

- Pragmatic mindset with the ability to balance risk, security, and delivery speed with business expectations in mind.

- Minimum 3-5 years of experience in IT Risk Management, Cybersecurity, Information Security, or related domains.

- Experience analyzing risks related to data platforms, data visualization tools, AI agents, and emerging AI technologies, with awareness of MCP servers and associated security, privacy, and governance risks.

📌 Risk Analyst (Mumbai)
🏢 HeadsnMinds Consultants
📍 Mumbai