Chevron India Risk Analyst Interview: Rounds, Questions and Preparation

What the job involves

A Risk Analyst in GCCs, consulting and Big 4 firms supports the identification, assessment and monitoring of financial, operational, compliance and strategic risks for global clients or in-house functions. Day to day work includes data analysis in Excel or SQL, preparing risk registers and dashboards, drafting control testing reports, and coordinating with audit or business teams. Freshers usually start on research, documentation and basic analytics under a senior analyst's review.

Role and Technical Knowledge

1. 1

   What is the difference between inherent risk and residual risk?

   Explain that inherent risk is before controls, residual is after controls. Give a simple example like vendor payment fraud or a manual journal entry.

2. 2

   How would you use a risk register in a consulting engagement?

   Cover identifying risks, rating likelihood and impact, assigning owners, and tracking mitigation actions. Mention how it helps prioritise audit or review work.

3. 3

   What are the key components of the COSO framework?

   List the five components: control environment, risk assessment, control activities, information and communication, and monitoring. Briefly link one component to a real process like procurement.

4. 4

   How do you test the design and operating effectiveness of a control?

   Distinguish design testing (is the control capable of preventing or detecting the risk?) from operating testing (did it work over a period?). Mention sampling, walkthroughs and evidence like approvals or reconciliations.

Practical Scenarios and Data Analysis

1. 5

   You are given a list of 5,000 vendor payments and asked to find duplicate payments. How would you approach it?

   Talk about sorting by vendor, invoice number and amount, using Excel functions like COUNTIFS or pivot tables, and checking for near-duplicates with date tolerance. Mention documenting exceptions for review.

2. 6

   A client's revenue has grown 20 percent but accounts receivable days have increased from 45 to 70. What risks would you flag?

   Highlight revenue recognition risk, channel stuffing, credit policy loosening, and potential bad debts. Suggest checking ageing analysis, customer credit limits and cut-off testing.

3. 7

   How would you assess third-party or vendor risk for a company expanding into a new market?

   Cover due diligence, financial health checks, compliance with local laws, sanctions screening, and ongoing monitoring. Mention using a risk rating matrix and contractual safeguards.

4. 8

   You notice a colleague has shared a client's confidential risk report on a personal email. What do you do?

   State that you would report it to your manager or compliance team immediately, avoid forwarding it further, and follow the firm's data privacy policy. Emphasise client confidentiality and regulatory obligations.

Behavioural and Situational Questions

1. 9

   Tell me about a time you had to analyse a large amount of data under a tight deadline.

   Use STAR format. Focus on how you prioritised, used tools like Excel or SQL, and communicated findings clearly despite time pressure.

2. 10

   Describe a situation where you disagreed with a team member's approach to solving a problem.

   Show that you listened, presented evidence or logic, and either reached a compromise or escalated respectfully. Avoid sounding confrontational.

3. 11

   Why do you want to work in risk advisory rather than core finance or audit?

   Link your interest to problem-solving, regulatory exposure, and the variety of industries you can work with. Mention any internship, course or project that sparked this interest.

4. 12

   Give an example of when you had to explain a complex idea to someone with less technical knowledge.

   Pick a college project or internship. Describe how you simplified the concept, used analogies or visuals, and confirmed understanding.

HR, Motivation and Sector Awareness

1. 13

   What do you know about the risk and compliance landscape for GCCs in India?

   Mention data privacy laws, outsourcing regulations, global parent company policies, and the need for strong internal controls. Show awareness of how GCCs support global risk functions.

2. 14

   How do you keep yourself updated on risk and regulatory changes?

   Name specific sources like RBI circulars, SEBI updates, Big 4 risk reports, or news from professional bodies. Mention any newsletters, webinars or courses you follow.

3. 15

   Where do you see yourself in three years in this role?

   Show a realistic path: deepening technical skills, leading small workstreams, and possibly pursuing certifications like FRM, CIA or CISA. Align your goal with the firm's growth.

4. 16

   Are you comfortable working with global clients across time zones?

   Answer yes and give an example of adapting to different schedules or cultures during college or an internship. Mention flexibility and clear communication.