What is the difference between inherent risk, residual risk, and control risk?

Define each clearly and explain how they relate in a risk register. Use a simple example like a vendor payment process.

How would you assess the financial risk of a company using its balance sheet and cash flow statement?

Mention key ratios like current ratio, debt-to-equity, and interest coverage. Link them to liquidity and solvency risk.

Explain the COSO ERM framework and how it helps in risk management.

Cover the five components: governance and culture, strategy and objective-setting, performance, review and revision, and information and communication. Keep it concise.

What are some common red flags in internal controls that a risk analyst should look for?

List items like lack of segregation of duties, unusual journal entries, and missing approvals. Show you understand fraud risk.

Back to library

GCCs, consulting and the Big 4

Northrop Grumman India Risk Analyst Interview: Rounds, Questions and Preparation

For Risk Analyst roles at companies like Northrop Grumman India

Share with friends

Preparing together? Send them this role's questions.

https://www.cynchrony.in/library/northrop-grumman-india-risk-analyst

What the job involves

Risk Analysts in GCCs, consulting, and Big 4 firms assess financial, operational, and compliance risks for clients or internal business units. They build risk registers, perform quantitative and qualitative analyses, and support audit or advisory engagements. Day to day work includes data gathering, control testing, report writing, and presenting findings to senior stakeholders.

Role and Technical Knowledge

1
What is the difference between inherent risk, residual risk, and control risk?
Define each clearly and explain how they relate in a risk register. Use a simple example like a vendor payment process.
2
How would you assess the financial risk of a company using its balance sheet and cash flow statement?
Mention key ratios like current ratio, debt-to-equity, and interest coverage. Link them to liquidity and solvency risk.
3
Explain the COSO ERM framework and how it helps in risk management.
Cover the five components: governance and culture, strategy and objective-setting, performance, review and revision, and information and communication. Keep it concise.
4
What are some common red flags in internal controls that a risk analyst should look for?
List items like lack of segregation of duties, unusual journal entries, and missing approvals. Show you understand fraud risk.

Practical Scenarios

5
You are asked to review a client's procurement process for risk. What steps would you take?
Outline a structured approach: map the process, identify key controls, test samples, and document findings. Mention vendor onboarding and approval limits.
6
A client's sales data shows a sudden spike in returns from one region. How would you investigate this as a risk analyst?
Suggest data analysis, root cause interviews, and checking for control gaps. Consider fraud, process errors, or market changes.
7
How would you prioritize risks when you have limited time and resources?
Use a risk matrix based on impact and likelihood. Explain how you would align with business objectives and stakeholder input.
8
You find that a key control is not working during an audit. What do you do next?
Describe escalation, documentation, and recommending remediation. Emphasize communication with the process owner and audit lead.

Behavioural and Situational

9
Tell me about a time you had to analyze a large amount of data under a tight deadline.
Use STAR format. Highlight your method, tool used (e.g., Excel), and how you ensured accuracy and met the deadline.
10
Describe a situation where you disagreed with a team member's approach to solving a problem.
Show respect, focus on data and logic, and how you reached a consensus. Avoid blaming others.
11
How do you handle confidential information in a professional setting?
Emphasize integrity, following company policies, and secure data handling. Give an example from an internship or project.
12
Why do you want to work as a Risk Analyst in a GCC or Big 4 environment?
Connect your interest in risk, structured problem-solving, and exposure to diverse industries. Mention learning opportunities and professional growth.

HR and Career Motivation

13
What do you know about the risk advisory services offered by Big 4 firms?
Mention areas like internal audit, SOX compliance, enterprise risk management, and forensic accounting. Show you have done research.
14
How do you stay updated with changing regulations and risk trends?
Talk about following regulatory bodies, reading industry reports, and taking short courses. Give a specific example.
15
Where do you see yourself in three years as a Risk Analyst?
Show ambition to deepen technical skills, take certifications like FRM or CIA, and lead small projects. Align with company growth.
16
Are you comfortable working with clients across different time zones?
Demonstrate flexibility and communication skills. Mention any experience with remote collaboration or global teams.

Ready to try it for real?

Take a timed test or talk through a mock interview for this role, then see your scores.

This is practice material for Risk Analyst roles, written with AI. It is not a list of questions Northrop Grumman India or any other company has asked.