• Lead the identification, assessment and monitoring of operational and information technology risks across business processes, applications, infrastructure, projects and strategic initiatives.
• Ensure material risks are evaluated consistently and escalated to the appropriate authority.
• Drive the enterprise-wide Risk and Control Self-Assessment process in coordination with business, operations and technology functions.
• Review the completeness and quality of assessments and ensure that risk registers are accurate, current and supported by appropriate evidence.
• Define, review and monitor Key Risk Indicators for material risk areas.
• Analyse trends, challenge threshold levels and ensure breaches or adverse movements are promptly reported, escalated and addressed through time-bound corrective actions.
• Conduct process walkthroughs and detailed risk assessments to understand workflows, dependencies, failure points and existing controls.
• Recommend improvements to strengthen control design, operating effectiveness and accountability across relevant functions.
• Oversee the operational risk incident management process, including incident identification, classification, impact assessment, reporting and closure.
• Review root cause analysis, challenge corrective and preventive actions, track action items and escalate delays or recurring incidents.
• Assess operational and technology risks associated with new products, system implementations, major enhancements, process changes, outsourcing arrangements and other business initiatives.




• Ensure identified risks are addressed before implementation or formally accepted by the appropriate authority.
• Develop risk mitigation plans jointly with business, operations and technology teams.
• Define clear actions, owners and target dates, monitor progress and escalate overdue or ineffective actions to senior management and relevant governance forums.
• Partner with Technology, Information Security, Compliance, Internal Audit and other control functions to promote a coordinated approach to risk management.
• Facilitate information sharing, avoid duplication and ensure consistent assessment and treatment of interrelated risks.
• Support the development, implementation and periodic review of the enterprise Risk Appetite Framework.
• Assist in defining suitable risk appetite statements, metrics, thresholds and escalation requirements for operational and technology risks, aligned with the organisation’s objectives and regulatory expectations.
• Prepare accurate and timely risk reports, dashboards and management updates for senior management and relevant committees.
• Provide clear analysis of the organisation’s risk profile, significant incidents, emerging risks, KRI breaches, control weaknesses and mitigation status to support informed decision-making.




• Maintain appropriate records of assessments, findings, approvals and closures to demonstrate effective oversight, traceability and compliance with the organisation’s risk management framework. Requirements
• Demonstrated experience in Operational Risk Management and/or Technology Risk Management.
• Strong knowledge of risk management frameworks, governance practices and internal control environments.
• Experience in conducting Risk and Control Self-Assessments (RCSA), maintaining risk registers and monitoring Key Risk Indicators (KRIs).
• Ability to perform process walkthroughs, identify risk exposures and evaluate control effectiveness.
• Experience managing operational risk incidents, root cause analysis and remediation tracking.
• Knowledge of operational and technology risk considerations relating to system implementations, process changes, outsourcing arrangements and business initiatives.
• Ability to develop, monitor and drive risk mitigation and corrective action plans across multiple stakeholders.
• Solid understanding of Risk Appetite Frameworks, risk metrics, thresholds and escalation requirements.
• Experience working with Technology, Information Security, Compliance, Internal Audit and business teams within a three-lines-of-defence environment.
• Strong analytical, stakeholder management, communication and report-writing skills.
• Ability to prepare risk dashboards, management reports and governance committee presentations.
• High attention to detail with strong documentation and record-management capabilities.

📌 Lead Risk Management (India)
🏢 National Payments Corporation Of India (NPCI)
📍 India