IT Risk Advisory Consultant

Company Description Bough Consulting is an advisory, assurance, and transformation solutions firm that partners closely with finance, audit, and compliance organizations. The company focuses on co-creating integrated solutions that connect people, processes, and technologies to address complex accounting, reporting, and compliance challenges. Bough emphasizes sustainable business performance while maintaining a strong focus on identifying and managing underlying risks. Team members collaborate with clients to design practical, business-oriented solutions that improve controls, transparency, and operational resilience.
Role Description The IT Risk Advisory Consultant is a full-time, on-site role based in Gurgaon. This role involves assessing IT and technology risks across client environments, including infrastructure, applications, and data, and recommending risk mitigation strategies. The consultant will perform IT risk assessments, support IT audits, review controls related to cybersecurity and information technology, and prepare clear documentation and reports for stakeholders. Day-to-day tasks include collaborating with client teams, analyzing existing processes and controls, contributing to remediation plans, and supporting the implementation of best practices in IT governance and risk management. The role also requires staying current with regulatory requirements, industry standards, and emerging technology risks.
Qualifications
Strong capabilities in IT Risk Management and Technology Risk to identify, assess, and prioritize risks across systems and processes.
Experience in IT Audit, including planning, executing, and reporting on IT control testing and remediation activities.
Solid understanding of core Information Technology concepts, architectures, and operations to evaluate technical environments effectively.
Knowledge of Cybersecurity principles, controls, and frameworks to assess and improve security posture.
Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field; professional certifications (e.g., CISA, CRISC, CISSP) are an advantage.
Ability to analyze complex issues, prepare structured documentation, and communicate clearly with technical and non-technical stakeholders.
Demonstrated aptitude for client service, collaboration, and working in cross-functional teams in a fast-paced environment.
Strong ethical standards, attention to detail, and willingness to continuously learn and adapt to new technologies and regulations.

Work arrangement
No