Senior Risk Analyst

The Chevron Engineering and Innovation Excellence Center (ENGINE) in Bengaluru, India brings together the resources and expertise of the Chevron global network with talent in India to enhance agility and technological innovation to optimize solutions for the world’s current and future energy challenges. As one of the leading energy providers worldwide, Chevron is involved in the production of crude oil and natural gas, manufacturing of transportation fuels, lubricants, petrochemicals, and additives, and the development of enabling technologies.

Chevron's vision is to be the global energy company most admired for its people, partnerships, and performance. With a clear purpose to develop affordable, reliable, ever-cleaner energy that enables human progress, we believe human ingenuity has the power to solve any challenge and overcome any obstacle. Meeting the world’s growing energy needs requires the pursuit of innovations and advancements that deliver a better future for all.

About the position

The Senior Risk Analyst plays a critical role in embedding cyber and IT risk management into technology delivery and operations. This role works closely with product teams, architects, engineering leaders, and security stakeholders to ensure risks are identified early, assessed pragmatically, and addressed without slowing business outcomes.

In addition to hands-on risk execution, the role provides leadership in driving consistent risk practices, influencing design decisions, and guiding junior analysts. The position combines strong stakeholder engagement with ownership of risk outcomes, focusing on architecture risk assessments, security assurance, incident support, remediation tracking, and awareness enablement.

The role is well-suited for a professional who can balance security rigour with delivery pragmatism while operating effectively in large, complex technology environments.

Key Responsibilities

• perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models, and third‑party integrations.

• Engage early with architects, engineers, and product teams to embed secure‑by‑design and risk‑based decisions into solution design.

• Guide and support security incidents, risk exceptions, and remediation efforts, including business justification reviews and action tracking.

• Act as the primary risk contact for assigned technology or business areas, providing clear guidance, influencing decisions, and delivering regular risk status updates.

• Provide direction and mentorship to analysts, ensuring quality and consistency in risk assessments and outputs.

• Deliver risk and security awareness sessions, process walkthroughs, and targeted enablement for technical and non‑technical stakeholders.

• Own and enhance risk metrics, dashboards, and tracking artefacts, and drive continuous improvement of risk processes and ways of working.

Required Experience & Qualifications

• Bachelor’s Degree with 8-10 years of experience in IT Risk Management, Cybersecurity, Information Security, or related domains.

• Strong experience conducting risk assessments, architecture/security reviews, and remediation tracking in enterprise environments.

• Demonstrated ability to influence stakeholders and drive risk outcomes across complex, multi-team environments.

• Strong working knowledge of industry-standard frameworks (e.g. ISO 27001, NIST, CIS Controls, risk management frameworks).

• Experience working in large, complex IT or digital environments with multiple stakeholders.

• Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor (preferred).

Key Skills & Attributes

• Strong analytical and risk evaluation skills

• Ability to influence technical and business stakeholders without direct authority

• Strong communication skills, with the ability to confidently engage diverse stakeholders and convey risk in clear, business‑relevant terms

• High ownership, accountability, and execution discipline

• Leadership mindset with the ability to guide teams and drive outcomes

• Pragmatic mindset with the ability to balance risk, security, and delivery speed with business expectations in mind