Risk Analyst

Job Description

Avanade is growing rapidly in Microsoft’s Mid-market and Corporate space (the upper end of what Microsoft calls its SME&C segment) and has embarked in a journey to transform the IT Services market in that space.

Avanade is already serving hundreds of SME&C clients across AI Business Solutions, Cloud & AI Platforms, and Security. Our focus now is structure and repeatability — packaging 25 years of enterprise experience into scalable, predictable motions designed specifically for SME&C. To enable this- we have launched a dedicated SME&C Business Unit which will have Solution specific ‘Catalyst Squads’ which will be virtual teams taking an opportunity for prepackaged and repeatable ‘Catalyst Solutions’ from qualified lead through to delivery completion.

The Risk Analyst is embedded within the Catalyst Squad and enables secure, low-friction, repeatable Catalyst Solution delivery from deal qualification through execution and scale. This role translates enterprise risk, compliance, and security expectations into practical squad-level guardrails that help teams move quickly without creating avoidable delivery, commercial, or client risk.

This is not a traditional enterprise risk governance role. The Risk Analyst will build and apply repeatable risk patterns, pre-approved guardrails, and lightweight assurance methods that fit SME&C deal velocity and productized delivery economics. They help the squad make clear, timely decisions on what can proceed within standard Catalyst Solution parameters, what requires mitigation, and what must be escalated.

The Risk Analyst works closely with the Solution Specialist & GTM Lead, Solution Architect, Squad Service Delivery Lead, delivery consultants, CSP specialists, Microsoft counterparts where relevant, and central risk, legal, security, privacy, and compliance teams. The role ensures risk is built into Catalyst Solutions by design, rather than managed after the fact.

Key Accountabilities:

Provides operational management of standard processes and programs related to:

• Developing and managing programs and processes to protect our people, information, reputation, and property

• Ensuring consistent and compliant implementation of risk and protection policies, programs, and processes across the organization, including providing training and information

• D efining contingency plans and processes to respond to risks to ensure business continuity

• Partnering with management to respond to safety and security issues, incidents, emergencies, and disasters

• Identifying and assessing potential risk events to determine possible outcomes and resulting impact to Avanade

• Managing risk drivers to minimize and mitigate root causes of risk events

• Analyzing and monitoring risk indicators to gain predictability into risk trends and drive planning and actions

• Mitigating risk by responding to events and supporting the creation of new solutions to minimize impact to Avanade

• Partnering with parent companies to assess and mitigate shared risk Other Position Details:

• May serve as the primary front-line point of contact for incident reporting and escalation within a geography or globally

• May require specific knowledge and capability related to information security, data protection, business continuity management, and/or general risk assessment and mitigation

Qualification

Key Role Skill & Capability Requirements:

Technical and non-technical skills include:

• Advanced knowledge of risk management-Advanced understanding and experience in program development/management, including demonstrated experience in designing and implementing technology and process solutions to reduce the potential risk of data compromise
• Vast experience using data to make predictions
• Possess great organizational skills and attention to detail
• Excellent written and verbal communication skills
• Effective interpersonal skills
• Ability to communicate tec