AIG India Risk Analyst Interview: Rounds, Questions and Preparation

What the job involves

Risk Analysts in GCCs, consulting and the Big 4 support identification, assessment and monitoring of financial, operational and compliance risks for global clients or captive operations. Day to day work includes data analysis, risk reporting, control testing, regulatory tracking and preparing risk dashboards for senior stakeholders. Freshers typically start with structured training in risk frameworks, Excel/SQL and domain-specific regulations before taking ownership of smaller workstreams.

Role and Technical Knowledge

1. 1

   What is the difference between inherent risk and residual risk, and why does it matter in a risk register?

   Define inherent risk as risk before controls and residual as after controls. Explain that residual risk drives prioritisation and reporting to management.

2. 2

   How would you explain a KRI to a business manager who only tracks revenue?

   Link KRIs to early warning signals, give one example like failed login attempts for cyber risk, and show how it helps avoid surprises.

3. 3

   What are the three lines of defence in risk management?

   Name business operations as first line, risk and compliance as second, internal audit as third. Briefly state each line's independence and reporting.

4. 4

   In a consulting or Big 4 context, how is a risk assessment for a client different from an internal risk team's work?

   Highlight client-specific scope, tighter timelines, need for benchmarking and recommendations, and the consulting firm's independent view.

Practical Scenarios and Data

1. 5

   You are given a spreadsheet with 10,000 transactions and asked to find unusual patterns. What steps would you take in Excel or SQL?

   Mention sorting, pivot tables, conditional formatting for outliers, and SQL queries for duplicates or thresholds. Show a structured approach from profiling to flagging.

2. 6

   A client's control testing shows a key control failed in two months out of twelve. How would you assess and report this?

   Discuss materiality, root cause, compensating controls and whether it is an isolated or systemic issue. Recommend a remediation plan with owners and timelines.

3. 7

   How would you build a simple risk dashboard for a monthly management review?

   Choose 5 to 7 KRIs with thresholds, show trend arrows, heat maps and commentary. Emphasise clarity for non-technical readers and actionability.

4. 8

   You notice a potential regulatory breach in a process you are reviewing. What do you do first?

   State that you escalate immediately through the defined channel, document facts without speculation, and avoid making promises to the client or business.

Behavioural and Situational

1. 9

   Tell me about a time you had to analyse a large amount of data under a tight deadline.

   Use STAR format. Focus on how you prioritised, what tools you used, and the outcome or feedback you received.

2. 10

   Describe a situation where you disagreed with a teammate's approach. How did you handle it?

   Show respect, evidence-based reasoning and willingness to escalate only when needed. End with a constructive outcome.

3. 11

   Why risk analysis in a GCC or consulting environment rather than a core finance role?

   Connect your interest in problem-solving, exposure to multiple industries or global processes, and structured career growth in risk.

4. 12

   Give an example of when you received critical feedback and how you acted on it.

   Be specific about the feedback, your initial reaction, the action you took and the improvement seen later.

HR and Company Fit

1. 13

   What do you know about the kind of risk work done in GCCs and Big 4 firms in India?

   Mention global captive centres supporting parent risk teams, consulting projects for BFSI clients, and exposure to regulations like GDPR or Basel III.

2. 14

   How do you handle repetitive or detail-heavy tasks that are part of risk monitoring?

   Acknowledge the need for accuracy, share a method like checklists or automation in Excel, and link it to building trust in risk reporting.

3. 15

   Where do you see yourself in three years in this role?

   Show realistic progression such as deeper domain expertise, certifications like FRM or CIA, and leading small workstreams or client deliverables.

4. 16

   Are you comfortable working with global teams across time zones?

   Give a concrete example of adapting schedules or communicating asynchronously. Mention flexibility and clear written updates.