Senior Engineer - IT Risk Management

We are seeking a talented individual to join our GIS at Marsh.

This role will be based in Pune.

This is a hybrid role that has a requirement of working at least three days a week in the office.

The Global Information Security (GIS) team at Marsh is seeking a motivated and detail-orientedIT Risk Analystto support third party risk management activities and technical risk assessment work across cyber, IT, and related risk domains.

In this role, you will help evaluate vendor and third party risks, review security evidence, support risk tracking and remediation activities, and contribute to the team’s broader technical risk processes.

You will work closely with more senior team members and partner across security, procurement, IT, and business teams to help strengthen Marsh’s risk management posture.

We will count on you to:

• Support third party risk assessments by reviewing security questionnaires, supporting documentation, and evidence provided by vendors.
• Help track third party risk findings, remediation actions, and follow-up activities.
• Assist with evaluating vendor control environments against internal requirements and risk standards.
• Review basic technical documentation, architecture summaries, and control evidence to identify potential risk concerns.
• Support technical risk assessment activities for infrastructure, applications, cloud, or endpoint environments, as needed.
• Help document assessment results, findings, and recommendations in a clear and consistent manner.
• Maintain risk records, trackers, dashboards, and reporting materials for leadership and stakeholders.
• Contribute to the coordination of remediation and issue management activities across internal teams and third parties.
• Assist with the development and improvement of risk management procedures, templates, and process documentation.
• Support workflow improvements, including the use of tools or automation where appropriate.
• Communicate professionally with internal stakeholders and vendors to gather information and support assessments.