Digital Risk Consultant

'

: - ( - )

Experience: 5+ yrs

Location: Bengaluru, Hyderabad

As a Digital Risk Consultant, you will be responsible for assessing and mitigating risks associated with third-party vendors and information security across multiple industries, ensuring robust cyber resilience through data-driven insights and AI-enabled risk evaluation. You will work closely with stakeholders to develop and implement comprehensive vendor risk frameworks, aligning security controls with regulatory requirements and emerging threat landscapes. Leveraging advanced cybersecurity threat intelligence, you will proactively identify, analyze, and monitor external risks that could impact business continuity and reputation. Your strategic guidance will enable organizations to prioritize risk mitigation efforts, reduce exposure, and achieve measurable improvements in their overall security posture.

Requirements

• Conduct thorough third-party risk management assessments, mapping vendor relationships to critical assets and compliance obligations.
• Lead vendor cybersecurity risk assessments, evaluating scope, controls, and compliance with industry standards such as ISO 27001, NIST, and SOC 2.
• Design, implement, and maintain information security risk assessment programs, ensuring timely identification of vulnerabilities and remediation.
• Develop AI-enabled vendor risk evaluation models to automate data collection, scoring, and predictive risk analysis.
• Perform continuous cybersecurity threat intelligence gathering, trend analysis, and threat modeling to inform risk mitigation strategies.
• Establish external risk monitoring processes, using feeds from threat intelligence platforms, open-source intelligence, and government alerts.
• Collaborate with legal, compliance, and business units to create risk-aware policies, contractual clauses, and due-diligence checklists.
• Deliver executive-level risk dashboards and reports, translating technical findings into actionable insights for senior leadership.
• Facilitate vendor risk workshops, training sessions, and CSF development to build a culture of security accountability.
• Stay abreast of emerging regulations, technologies, and best practices in digital risk and cyber risk management to continuously enhance program effectiveness.
• 5+ years of experience in third-party risk management, vendor cybersecurity assessment, or information security risk assessment roles.
• Proven expertise with AI/ML techniques for risk analysis, risk scoring, or threat intelligence enrichment.
• Strong knowledge of cybersecurity frameworks (NIST, ISO 27001, SOC 2, PCI-DSS) and regulatory requirements relevant to digital assets.
• Demonstrated ability to design, implement, and maintain risk monitoring tools and dashboards for executive visibility.
• Excellent analytical capabilities, with experience in risk scoring methods, data analytics, and risk models.
• Excellent communication skills, with a track record of presenting complex security risk findings to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, multi-region environment spanning Bengaluru, Hyderabad, and beyond.
• Proficiency in leveraging cybersecurity threat intelligence platforms (e.g., Recorded Future, ThreatConnect, Anomali).
• Familiarity with contract negotiation and vendor compliance program development.
• A continuous improvement mindset, actively seeking to refine risk frameworks and incorporate emerging technologies.