The posting
Job Title: Senior Business Analysis – Cloud Hardening / Cloud Engineering
About Us
“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.
WHY JOIN CAPCO?
You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.
MAKE AN IMPACT
Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.
#BEYOURSELFATWORK
Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.
CAREER ADVANCEMENT
With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.
DIVERSITY & INCLUSION
We believe that diversity of people and perspective gives us a competitive advantage.
Location - BANGALORE
Role Description
Required Qualifications • Seven or more years of experience in business analysis, governance, program coordination, remediation management, risk management, audit support, compliance, technology governance, or a related discipline. • Demonstrated experience coordinating remediation activities associated with internal audit, external audit, regulatory reviews, risk-management programs, compliance programs, or enterprise control deficiencies. • Experience developing and maintaining remediation plans, milestone schedules, issue and risk logs, action-item trackers, commitment registers, and executive reporting. • Experience coordinating evidence collection, quality review, submission, approval, and closure-support activities. • Strong understanding of issue management, remediation governance, control ownership, evidence traceability, and closure-readiness practices. • Strong analytical, organizational, problem-solving, facilitation, and stakeholder-management skills. • Excellent written and verbal communication skills, including the ability to prepare concise executive summaries and governance materials. • Ability to manage multiple concurrent workstreams, competing priorities, and time-sensitive commitments in a complex enterprise environment. • Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams, and SharePoint or comparable collaboration and reporting tools. • Ability to work independently, maintain accurate documentation, incorporate challenge and review comments, and escalate issues appropriately.
Preferred Qualifications • Experience in financial services or another highly regulated industry. • Familiarity with cybersecurity, information security, technology risk, operational risk, cloud security, infrastructure security, application security, identity and access management, data protection, or control-management functions. • Working knowledge of governance and control frameworks such as NIST, ISO/IEC 27001, CIS Controls, COBIT, or comparable risk-management frameworks. • Experience supporting MRA programs, regulatory examinations, audit-remediation programs, enterprise risk initiatives, or large-scale control-remediation efforts. • Experience with Jira, Confluence, SharePoint, ServiceNow, Archer, Azure DevOps, Power BI, or comparable governance, workflow, evidence, and reporting platforms. • Relevant certification such as CBAP, PMP, PMI-PBA, CISA, CRISC, or equivalent professional credentials.
Expected Deliverables • Enterprise remediation plans, roadmaps, milestone schedules, and integrated status trackers. • Audit, regulatory, risk, compliance, and management-action-plan response trackers. • Executive dashboards, scorecards, status reports, briefing materials, and governance presentations. • Risk, issue, dependency, decision, and action-item logs. • Evidence inventories, submission trackers, organized repositories, and audit-ready closure-support packages. • Meeting materials, minutes, decision records, and documented action-item follow-up. • Process maps, RACI models, procedures, templates, playbooks, and reporting requirements. • Accurate and current documentation of remediation status, blockers, approvals, exceptions, and closure readiness.
Engagement Success Criteria • Enterprise remediation commitments are tracked accurately, consistently, and transparently across participating functions. • Milestone risks, blockers, dependencies, and data-quality issues are identified early and escalated through the appropriate governance channels. • Evidence packages are complete, organized, traceable, and suitable for audit, risk, regulatory, or compliance review. • Executive reporting provides timely, concise, and actionable insight into remediation progress and delivery risk. • Stakeholders maintain clear ownership and accountability throughout the remediation lifecycle. • Governance records support defensible conclusions regarding remediation progress and closure readiness. • Work products are maintained in approved repositories and can be understood, sustained, and reused by TD personnel after the engagement ends. • Information Security and Technology teams spend less time on administrative coordination and more time executing remediation activities
