15 Aug
|
FinThrive
|
Gurugram
15 Aug
FinThrive
Gurugram
Overview We are seeking a detail-oriented and cooperative Associate Cybersecurity Risk Analyst to join our growing security team. In this role, you will jointly push forward FinThrive’s Third Party Security Risk Management (TPRM) program and manage responses to customer security inquiries. You will work cross-functionally with IT, Engineering, Product, Sales, Procurement, and Legal to deliver timely, accurate, and defensible diligence on both sides of the security review. Responsibilities • Third Party Security Risk Management ◦ Execute and mature the day-to-day TPRM program, including risk-based vendor tiering aligned to data sensitivity, criticality, and regulatory obligations. ◦ Perform vendor security assessments using questionnaires and evidence (SIG, CAIQ, custom) and review assurance artifacts such as SOC 2 Type II, ISO 27001, HITRUST, PCI, and pen test results. ◦ Document findings, drive remediation to closure, and manage time-bounded risk acceptances and exceptions. ◦ Support continuous monitoring (security ratings, attestation refresh) and secure vendor offboarding.
◦ Partner with Legal and Procurement to embed security requirements in contracts (security addendums, DPAs, breach notification, right to audit). • Customer Security Inquiries ◦ Manage and respond to customer security questionnaires, RFPs, and due diligence requests. ◦ Maintain a repository of standardized responses and supporting documentation to enable cross-functional team independence. ◦ Translate complex security concepts into customer-friendly language and represent FinThrive’s security posture to prospects and customers. • Cross-Functional Collaboration & Tooling ◦ Work closely with IT, Engineering, Product, and Sales to ensure timely, accurate completion of both vendor and customer reviews. ◦ Implement and manage tools (e.g., Whistic, Vanta, security ratings platforms) to streamline and automate inquiry and assessment workflows. ◦ Produce metrics and dashboards covering vendor risk po
📌 Associate Cybersecurity Risk Analyst (Gurugram)
🏢 FinThrive
📍 Gurugram