Senior Information Security Risk Analyst

📋 Description

• Execute cybersecurity risk assessments for third-party vendors, suppliers, service providers and
• Collaborate with IT, Engineering, Procurement, Legal, and Risk teams to identify, evaluate, and
• Execute internal IT risk assessments across IT infrastructure, cloud environments, business
• Maintain and update the enterprise IT Risk Register, tracking risk treatment plans, remediation
• Assess effectiveness of internal IT controls, including access management, backup and disaster
• Monitor Key Risk Indicators (KRIs) and prepare periodic risk reports for management and oversight

🎯 Requirements

• 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk
• Strong understanding of internal IT general controls (ITGC), access control, disaster recovery
• Working knowledge of industry frameworks and standards, such as RBI Framework for Outsourcing of
• Demonstrated ability to review vendor reports, security certifications, penetration test summaries
• Excellent analytical, organizational, and documentation skills with ability to communicate risk
• Proven ability to manage multiple vendor assessments and internal risk tasks simultaneously in a

🎁 Benefits

• Relocation assistance
• Free office meals (lunch & dinner)
• Generous leave policy (birthday leave, period leave, paternity/maternity support)
• Salary advance and loan policies
• Quarterly rewards and recognition programs
• Referral program with incentives