IT Risk Analyst

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes. About TCS TCS is an IT services, consulting, and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 55 years. Its consulting‑led, cognitive‑powered portfolio of business, technology, and engineering services and solutions is delivered through its unique Location Independent Agile™ delivery model, recognized as a benchmark of excellence in software development. A part of the Tata group, India's largest multinational business group, TCS operates in 55 countries and employs over 607,000 highly skilled individuals, including more than 10,000 in Canada. The company generated consolidated revenues of US $ 30 billion in the fiscal year ended March 31, 2025, and is listed on the BSE and the NSE in India. TCS' proactive stance on climate change and award‑winning work with communities across the world have earned it a place in leading sustainability indices such as the MSCI Global Sustainability Index and the FTSE4Good Emerging Index. Role Description Required Skill Set The IT Risk Analyst Reviewer will be responsible for reviewing, documenting, and managing IT risk findings across multiple regions (UK, Toronto, India). This role requires a senior, independent professional with a strong understanding of IT risk standards, audit processes, and the ability to challenge and improve risk management practices within the organization. Review and assess IT risk findings, evaluate risk findings created by application teams, focusing on non‑compliance issues (e.g., NPIDs, vulnerabilities, DLP, expired passwords). Ensure findings are properly documented and milestones for remediation are tracked and addressed. Play a review role rather than direct remediation, ensuring standards are followed and findings are closed appropriately. Audit Coordination: work closely with internal and external auditors, project teams, and operational risk teams to provide evidence and meet audit requirements. Facilitate audits, including application security, data security, IAM, PAM, and compliance (e.g., GDPR, NYDF). Coordinate quarterly monthly governance calls to highlight risk issues and progress. Project Risk Assessment: support project risk assessments, including preparing and reviewing documents such as IRP (Integrated Risk Profile), IT Risk Triage, and related artifacts. Collaborate with PMs, tech leads, and custodians to ensure risk documentation is complete and accurate. Communication & Stakeholder Management: ensure effective communication with application teams, auditors, and other stakeholders regarding risk findings and remediation plans. Make teams accountable for addressing findings and ensure timely follow‑up. Process Improvement: identify gaps in current risk management practices and propose improvements. Support the development and refresh of risk integration activities, crown jewel reviews, and app lists. Preferred Qualifications Prior experience in banking, finance IT, or wealth management risk functions. Familiarity with Archer, Tableau, and other risk management reporting tools. Experience working with global teams and managing cross‑regional risk activities. Additional Information Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). If you require accommodation during the recruitment and selection process, please inform Human Resources. Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2‑week period. We invite you to continue to apply for other opportunities that match your profile. Seniority level Mid‑Senior level Employment type Full‑time Job function Information Technology and Engineering Industries IT Services and IT Consulting #J-18808-Ljbffr