Description

- Conduct cybersecurity risk assessments and document findings, risk ratings, and recommendations
- Lead third-party risk assessments for vendors, suppliers, and technology partners
- Interpret regulatory, contractual, and framework requirements and apply them to business use cases
- Support external audits, certifications, and client-facing security assessments
- Advise stakeholders on mitigation strategies and track remediation progress
- Analyze the security risk of current or existing computer applications, software or services
- Deliver cybersecurity awareness training and simulated phishing activities developed by CAS
- Lead CAS Objectives and Key Results (OKRs), initiatives, and projects with low to moderate operational impact to the business
- Participate in the CAS Weekly Champion rotation and enhance Champion duties defined in the CAS Weekly Champion playbook
- All other duties as assigned

Qualifications

- Bachelor’s degree in Cybersecurity, Information Systems, Risk Management,



or related field (or equivalent experience)
- Demonstrated experience independently performing cybersecurity risk, compliance, or assurance activities
- Experience engaging directly with business stakeholders or third parties on cybersecurity matters
- Ability to translate security and compliance requirements into business-relevant guidance
- Strong written and verbal communication skills
- Applied experience with frameworks such as NIST, ISO 27001, SOC 2, or similar
- Preferred professional cybersecurity certification (e.g., Security , CISA, CRISC, CISSP)

This job posting will remain open a minimum of 72 hours and on an ongoing basis until filled.

Job Information Technology

Primary Location India-Karnataka-Bengaluru

Schedule: Full-time

Travel: No

Req ID: 261175

Job Hire Type Experienced Not Applicable #BMI N/A

📌 Information Security Analyst (Government, Risk & Compliance) (India)
🏢 Burns & McDonnell
📍 India