Marsh McLennan—Senior Engineer - IT Risk Management

Job description

Description: We are seeking a talented individual to join our GIS at Marsh. This role will be based in Pune. This is a hybrid role that has a requirement of working at least three days a week in the office. Senior Engineer – IT Risk Management The Global Information Security (GIS) team at Marsh is seeking a motivated and detail-orientedIT Risk Analystto support third party risk management activities and technical risk assessment work across cyber, IT, and related risk domains. In this role, you will help evaluate vendor and third party risks, review security evidence, support risk tracking and remediation activities, and contribute to the team’s broader technical risk processes. You will work closely with more senior team members and partner across security, procurement, IT, and business teams to help strengthen Marsh’s risk management posture. We will count on you to: - Support third party risk assessments by reviewing security questionnaires, supporting documentation, and evidence provided by vendors. - Help track third party risk findings, remediation actions, and follow-up activities. - Assist with evaluating vendor control environments against internal requirements and risk standards. - Review basic technical documentation, architecture summaries, and control evidence to identify potential risk concerns. - Support technical risk assessment activities for infrastructure, applications, cloud, or endpoint environments, as needed. - Help document assessment results, findings, and recommendations in a clear and consistent manner. - Maintain risk records, trackers, dashboards, and reporting materials for leadership and stakeholders. - Contribute to the coordination of remediation and issue management activities across internal teams and third parties. - Assist with the development and improvement of risk management procedures, templates, and process documentation. - Support workflow improvements, including the use of tools or automation where appropriate. - Communicate professionally with internal stakeholders and vendors to gather information and support assessments. - Escalate complex issues, exceptions, or potential control gaps to more senior team members. What you need to have: - Experience in third party risk, IT risk, cybersecurity, audit, compliance, or a related field. - Basic understanding of cybersecurity, IT risk, and third party risk management concepts. - Strong analytical skills and attention to detail. - Ability to review documentation, compare it to requirements, and identify basic gaps or concerns. - Strong written and verbal communication skills. - Comfort working with spreadsheets, trackers, and reporting tools. - Ability to manage multiple tasks and follow through on deadlines. - Willingness to learn technical concepts related to infrastructure, cloud, applications, and security controls. - Experience working in a professional environment with cross-functional teams. - Ability to work independently on routine tasks while seeking guidance when needed. What makes you stand out? - Exposure to third party risk assessments, vendor reviews, or security questionnaires. - Familiarity with technical risk concepts across infrastructure, cloud, applications, or endpoints. - Experience supporting issue management, remediation tracking, or control monitoring activities. - Strong organizational skills and ability to maintain accurate records and reporting. - Interest in process improvement, automation, or workflow efficiency. - A proactive, curious mindset and eagerness to build technical and risk management knowledge. - Ability to communicate clearly with both technical and non-technical stakeholders. Why join our team: - We help you be your best through professional development opportunities, interesting work, and supportive leaders. - We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and make an impact for colleagues, clients, and communities. - Our scale provides a range of career opportunities, along with benefits and rewards that support your well-being. Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X. Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person. Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X. Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person. Skills: it risk management, cybersecurity, vendor risk assessment, risk tracking, technical documentation, analytical skills, communication skills, spreadsheets, process improvement, automation, cross-functional collaboration, issue management, control monitoring