Total Number of Openings
1
The Risk Analyst plays a key role in embedding cyber and IT risk management into technology delivery and operations. This role works closely with product teams, architects, engineering leaders, and security stakeholders to ensure risks are identified early, assessed pragmatically, and addressed without slowing business outcomes.
The position combines hands-on risk execution with strong stakeholder engagement, focusing on architecture risk assessments, security assurance, incident support, remediation tracking, and awareness enablement. The role is well-suited for a professional who can balance security rigour with delivery pragmatism in large, complex technology environments. About the Company
The Chevron Engineering and Innovation Excellence Center (ENGINE) in Bengaluru India brings together the resources and expertise of the Chevron global network with talent in India to enhance agility and technological innovation to optimize solutions for the world’s current and future energy challenges. As one of the leading energy providers worldwide, Chevron is involved in the production of crude oil and natural gas, manufacturing of transportation fuels, lubricants, petrochemicals, and additives, and the development of enabling technologies.
Chevron's vision is to be the global energy company most admired for its people, partnerships, and performance. With a clear purpose to develop affordable, reliable, ever-cleaner energy that enables human progress, we believe human ingenuity has the power to solve any challenge and overcome any obstacle. Meeting the world’s growing energy needs requires the pursuit of innovations and advancements that deliver a better future for all.
About the Position
This role will report into the IT Risk Manager at Chevron Engine, India.
Key Responsibilities
Perform cyber and IT risk assessments for applications and platforms, reviewing architectures, data flows, deployment models, and third‑party integrations.
Engage early with architects, engineers, and product teams to embed secure‑by‑design and risk‑based decisions into solution design.
Support security incidents, risk exceptions, and remediation efforts, including business justification reviews and action tracking.
Act as the primary risk contact for assigned technology or business areas, providing clear guidance and regular risk status updates.
Deliver risk and security awareness sessions, process walkthroughs, and targeted enablement for technical and non‑technical stakeholders.
Maintain risk metrics, dashboards, and tracking artefacts, and contribute to continuous improvement of risk processes and ways of working.
Required Qualifications
Minimum 3-5 years of experience in IT Risk Management, Cybersecurity, Information Security, or related domains.
Practical experience conducting risk assessments, architecture/security reviews, and remediation tracking.
Strong working knowledge of industry-standard frameworks (e.g. ISO 27001, NIST, CIS Controls, risk management frameworks).
Experience analyzing risks related to data platforms, data visualization tools, AI agents, and emerging AI technologies, with awareness of MCP servers and associated security, privacy, and governance risks.
Experience working in large, complex IT or digital environments with multiple stakeholders.
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor (preferred or in progress) would be advantageous.
Preferred Qualifications
Strong analytical and risk evaluation skills
Ability to influence technical and business stakeholders without direct authority
Strong communication skills , with the ability to confidently engage diverse stakeholders and convey risk in clear, business‑relevant terms.
High ownership, accountability, and execution discipline
Pragmatic mindset with the ability to balance risk, security, and delivery speed with business expectations in mind.
Chevron ENGINE supports global operations, supporting business requirements…