Risk Analyst

About Us
“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.
WHY JOIN CAPCO?
You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.
MAKE AN IMPACT
Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.
#BEYOURSELFATWORK
Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.
CAREER ADVANCEMENT
With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.
DIVERSITY & INCLUSION
We believe that diversity of people and perspective gives us a competitive advantage.
Role: Risk and Control SME
Location: Bangalore
Years of Experience - 9 + years
Key Responsibilities
Current-state assessment: Review existing end-to-end processes, risks, controls, hand-offs, approvals, manual interventions, exceptions, and pain points.
Risk identification: Identify operational, regulatory, conduct, fraud, data, technology, third-party, and financial risks affected by process changes.
Controls assessment: Evaluate whether existing controls are necessary, effective, duplicated, overly manual, or no longer relevant.
Process re-engineering: Challenge unnecessary approvals, reconciliations, hand-offs, and control steps while ensuring material risks remain appropriately mitigated.
Future-state control design: Define preventive/detective controls, automated controls, maker-checker arrangements, thresholds, exception handling, access controls, reconciliations, monitoring, and evidence requirements.
RCSA / risk-control mapping: Map redesigned process steps to risks, controls, control owners, frequencies, evidence, and relevant policies/regulatory obligations.
Control rationalization: Identify redundant or overlapping controls and opportunities to consolidate or automate them.
Change-risk assessment: Assess risks introduced by automation, system changes, centralization/offshoring, role changes, straight-through processing, AI, or other transformation initiatives.
Governance and challenge: Work with process owners, Operations, Technology, Compliance, Operational Risk, Internal Audit and other stakeholders to obtain appropriate challenge and sign-off.
Implementation assurance: Confirm that controls designed for the future state are implemented, documented, owned and testable before go-live.