Below is a curated list of leading risk-management service providers operating in India, grouped by the type of service they’re best known for and a short note on when to choose each.

Global consulting / enterprise risk & GRC (broad advisory, ERM, internal audit, cyber, model validation)

• KPMG in India — large risk-advisory practice (GRC, financial & technology risk, managed Risk Hub). Good for enterprise-wide ERM, regulatory compliance and GRC platform implementations. (kpmg.com)
• PwC India — full-spectrum risk advisory plus analytics and proprietary risk tools (cyber, controls, internal audit). Good for data-driven risk transformation and internal audit. (pwc.in)
• Deloitte India — risk, regulatory & forensic services and cyber risk managed services. Strong where risk, forensic investigations and cyber/tech risk intersect. (deloitte.com)
• EY India — enterprise risk, financial‑services risk, risk-managed services and risk transformation. Good for board-level risk strategy and managed risk functions. (ey.com)
• Protiviti (India member firm) — consulting-focused risk, internal audit, and GRC implementations; partners with IRM platforms. Useful for mid‑to‑large corporates wanting hands‑on consulting + platform delivery. (businesswire.com)

Insurance broking / risk-transfer & specialty broking (transfer solutions, reinsurance, site/engineering/nat‑cat modelling)

• Marsh India — market‑leading insurance broker and risk adviser in India; strong in programme design, analytics and claims advocacy. Best for complex insurance placements and enterprise risk transfer. (marsh.com)
• Aon India — commercial risk, reinsurance and data-driven risk solutions; strong analytics and specialist sector practices. Good for insurance benchmarking, captives and specialty lines. (aon.com)
• Willis Towers Watson (WTW) India — enterprise risk management, NATCAT/climate advisory and broking services. Good for remit that combines analytics, engineering and insurance placement. (wtwco.com)

Risk analytics, ratings, and specialist data/credit-risk providers

• CRISIL (an S&P Global company) — risk solutions and analytics for banks/financial institutions (modeling, scorecards, platforms). Best for credit risk models, regulatory reporting and BFSI implementations. (crisil.com)
• ICRA Analytics — analytics and cyber‑risk partnerships (cyber risk ratings/analytics); useful for financial-sector risk analytics and cyber risk assessments. (icraanalytics.com)
• CareEdge / CARE Analytics — credit-tech and model‑validation, intelligent credit monitoring and regulatory reporting (Basel/IFRS-related). Good for lenders and NBFCs needing credit-risk platforms. (careedge.in)

IT / digital / platform-led risk & compliance providers (GRC automation, cyber, ETRM, model ops)

• Tata Consultancy Services (TCS) — large IT/consulting practice with risk & compliance platforms, regulatory implementations and analytics. Best for large-scale IT-enabled risk transformations. (tcs.com)
• Infosys / Infosys Consulting — GRC, cyber, ETRM (energy/commodity trading & risk) and risk‑compliance platforms; good when you need strong technology + domain capability. (infosys.com)
• Wipro — risk & compliance consulting, regulatory reporting and security services; useful for outsourcing/managed services and remediation projects. (wipro.com)

How to pick the right provider (quick checklist)

• Scope: use Big Four / Protiviti or TCS/Infosys for end‑to‑end ERM + tech; use Marsh/Aon/WTW for insurance/risk‑transfer; use CRISIL/ICRA/CareEdge for credit/risk analytics. (business-standard.com)
• Industry fit: choose firms with strong sector experience (BFSI, infra, energy, pharma).
• Scale & budget: global firms scale but cost more; niche analytics firms often deliver faster, lower‑cost pilots.
• Tech stack: if you need GRC/IRM software or ETRM, confirm vendor partnerships (e.g., OpenPages, Archer, MetricStream, Riskonnect). (kpmg.com)

If you’d like, I can:

• produce a 1‑page comparison (services, typical fees/ranges, recent India case studies) for any 3 firms you pick, or
• recommend 3 vendors matched to a specific industry and the exact risk problem you have (ERM rollout, cyber, credit-model validation, insurance placement, etc.).

(Selected sources: KPMG India, PwC India, EY India, Deloitte India, Marsh India, Aon India, WTW India, CRISIL, Protiviti, ICRA Analytics, CareEdge, TCS, Infosys, Wipro.) (kpmg.com)