Senior Information Security Risk Analyst
Fam (company site, opens in a new tab)3–5 yrsBengaluruOn-siteDirect career pageEst. 12–18 LPA
Posted 1h ago
Reach people at Fam
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Fam you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Execute and own IT risk assessments and third-party cybersecurity risk evaluations for vendors, suppliers, and internal IT systems.
- Maintain and update enterprise IT Risk Register and track remediation plans with cross-functional teams.
- Monitor risks via KRIs, vendor security incidents, and collaborate closely with Procurement, Legal, Engineering, and Risk to mitigate technology and vendor risks.
Minimum Requirements
- 3 to 5 years experience in IT risk management, cybersecurity, third-party risk, or information security governance.
- Strong knowledge of IT General Controls, access control, disaster recovery, cloud security, and data protection principles.
- Familiarity with RBI outsourcing frameworks, RBI cyber resilience guidelines, ISO 27001, ISO 31000, and NIST CSF.
- Experience reviewing vendor security artifacts like reports, penetration tests, and questionnaires.
Ideal Candidate Profile
- Experienced operating in dynamic, fast-paced environments managing multiple vendor assessments and IT risk tasks concurrently.
- Comfortable influencing cross-functional stakeholders including Procurement, Legal, Security, Engineering, and leadership to embed risk posture.
- Background in regulated financial services or technology sectors with exposure to compliance and audit-ready risk processes.