Risk Analyst

AboutUs

CapcoaWiprocompany100BestCompaniesforWomeninIndia2022byAvtar&.

WHYJOINCAPCO

.

MAKEANIMPACT

.

#BEYOURSELFATWORK

Capcohasatolerantopenculturethatvaluesdiversityinclusivityandcreativity.

CAREERADVANCEMENT

WithnoforcedhierarchyatCapcoeveryonehastheopportunitytogrowaswegrowtakingtheircareerintotheirownhands.

DIVERSITY&INCLUSION

We believe that diversity of people and perspective gives us a competitive advantage.

Role: Risk and Control SME

Location: Bangalore

Years of Experience - 9 years

Key Responsibilities

• Current-state assessment: Review existing end-to-end processes risks controls hand-offs approvals manual interventions exceptions and pain points.
• Risk identification: Identify operational regulatory conduct fraud data technology third-party and financial risks affected by process changes.
• Controls assessment: Evaluate whether existing controls are necessary effective duplicated overly manual or no longer relevant.
• Process re-engineering: Challenge unnecessary approvals reconciliations hand-offs and control steps while ensuring material risks remain appropriately mitigated.
• Future-state control design: Define preventive/detective controls automated controls maker-checker arrangements thresholds exception handling access controls reconciliations monitoring and evidence requirements.
• RCSA / risk-control mapping: Map redesigned process steps to risks controls control owners frequencies evidence and relevant policies/regulatory obligations.
• Control rationalization: Identify redundant or overlapping controls and opportunities to consolidate or automate them.
• Change-risk assessment: Assess risks introduced by automation system changes centralization/offshoring role changes straight-through processing AI or other transformation initiatives.
• Governance and challenge: Work with process owners Operations Technology Compliance Operational Risk Internal Audit and other stakeholders to obtain appropriate challenge and sign-off.
• Implementation assurance: Confirm that controls designed for the future state are implemented documented owned and testable before go-live.