Lead analyst - GRC

ABOUT IRIS SOFTWARE

IRIS Software Inc. is a professional software services organization that delivers high quality and cost effective solutions to businesses globally. Our customers include Fortune 100 businesses and mid-sized firms across Financial Services, Life Sciences, Logistics & Distribution and High Tech industries. We leverage best-of-breed technologies and flexible engagement models to deliver value for our customers businesses.

We are a high growth setup with 4500+ people based out of our offices in India, US and Canada. We are strategic partners to over 25 of the Fortune 100 companies and our consistent strive to achieve the highest levels of customer satisfaction has translated into long-standing relationships and a preferred-partner status with many of our customers. Over the years, more than 90% of our customers have chosen to engage with us for repeat business.

IRIS is a quality and security focused organization. We have been appraised at Level 5 of the CMMI Institute's Capability Maturity Model (CMMI®) and have been certified to ISO 9001:2015. Our Information Security Management framework is aligned and certified to ISO 27001:2013 and SOC2 Type II.

For more details visit us at www.irissoftware.com

Key Responsibilities:

• Assist in identifying and assessing operational, financial, compliance, and IT-related risks.
• Support the development and implementation of risk mitigation plans.
• Conduct risk assessments and control effectiveness testing.
• Maintain and update the organization's risk register.
• Monitor key risk indicators (KRIs) and report risk exposure to management.
• Coordinate with internal stakeholders to ensure compliance with policies and regulatory requirements.
• Support internal and external audit activities.
• Prepare risk reports, dashboards, and documentation for review.
• Assist in incident management and root cause analysis.

About the Role

A short paragraph summarizing the key role responsibilities.

Responsibilities

• Assist in identifying and assessing operational, financial, compliance, and IT-related risks.
• Support the development and implementation of risk mitigation plans.
• Conduct risk assessments and control effectiveness testing.
• Maintain and update the organization's risk register.
• Monitor key risk indicators (KRIs) and report risk exposure to management.
• Coordinate with internal stakeholders to ensure compliance with policies and regulatory requirements.
• Support internal and external audit activities.
• Prepare risk reports, dashboards, and documentation for review.
• Assist in incident management and root cause analysis.

Qualifications

• 5-8 years of experience in Risk Management, Internal Audit, Compliance, or Governance.
• Basic understanding of risk frameworks (ISO 31000, etc.).
• Experience in risk assessment methodologies and control testing.

Required Skills

• Strong analytical and problem-solving skills.
• Good communication and stakeholder management skills.
• Proficiency in MS Excel, PowerPoint, and reporting tools.
• Ability to work independently and manage multiple priorities.

Preferred Skills

• Experience in risk assessment methodologies and control testing.