Risk Analyst - IT Risk

About the role

Chevron ENGINE, the Engineering and Innovation Excellence Center in Bengaluru, is hiring a Risk Analyst who reports to the IT Risk Manager. The role covers cyber and IT risk for applications and platforms, working closely with architects, engineers and product teams.

Key responsibilities

• Perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models and third-party integrations.
• Engage early with architects, engineers and product teams to embed secure-by-design and risk-based decisions into solution design.
• Support security incidents, risk exceptions and remediation, including business justification reviews and action tracking.
• Act as the primary risk contact for assigned technology or business areas, giving clear guidance and regular risk status updates.
• Deliver risk and security awareness sessions, process walkthroughs and enablement for technical and non-technical stakeholders.
• Maintain risk metrics, dashboards and tracking artefacts, and help improve risk processes and ways of working.

Required profile

• Minimum 3-5 years of experience in IT Risk Management, Cybersecurity, Information Security or related fields.
• Practical experience conducting risk assessments, architecture/security reviews and remediation tracking.
• Experience in large, complex IT or digital environments with multiple stakeholders.
• Preferred: strong analytical skills, ability to influence stakeholders without direct authority, strong communication, ownership and a pragmatic approach to balancing risk, security and delivery speed.

Required skills

• Working knowledge of frameworks such as ISO 27001, NIST and CIS Controls.
• Experience analysing risks around data platforms, data visualization tools, AI agents and emerging AI technologies, including MCP servers.
• Relevant certifications such as CISA, CISSP or ISO 27001 Lead Implementer/Auditor are advantageous.

The standard work week is Monday to Friday, 8:00am to 5:00pm or 1:30pm to 10:30pm, aligned to business requirements. Chevron does not sponsor employment visas or consider candidates on time-limited visa status. Apply through the online application form.