Job Summary

Location: Bangalore

Reporting to: Director, Product Security The Third-Party Security Risk Analyst will support the identification, assessment, monitoring, and mitigation of cybersecurity risks associated with third-party vendors and suppliers. This role conducts risk assessments, supports compliance with security requirements, and collaborates with Global Procurement, Legal, Internal Audit, and other stakeholders to strengthen Fluences third-party security risk management program.

Responsibilities

- Core Operations:

- Conduct security risk assessments for direct, indirect, logistics, and other suppliers and vendors.

- Support the development, implementation, and continuous improvement of third-party security risk management policies, standards, procedures, and assessment methods.

- Monitor third-party compliance with contractual and organizational security requirements and track identified issues through remediation or documented risk treatment

- Cross-Functional Collaboration:

- Collaborate with Global Procurement, Legal, Internal Audit, business owners, and other internal teams to address and mitigate identified third-party risks.

- Review security-related clauses in vendor contracts and provide risk-based input to support negotiations and contracting decisions.

- Prepare clear reports and dashboards summarizing third-party risk activities, findings, remediation status, and key risk indicators for management review.

- Security Advocacy:

- Maintain accurate third-party assessment records, evidence, risk decisions, and remediation documentation.

- Support ongoing monitoring of higher-risk vendors and reassess third parties when material changes, incidents, or recent risks are identified.

- Stay current on industry trends, emerging threats, and regulatory changes affecting third-party and supply chain cybersecurity risk.

- Identify opportunities to automate assessment workflows, evidence collection, risk tracking, reporting, and dashboarding.





Required Qualifications

- Bachelors degree in Information Security, Cybersecurity, Risk Management, Information Technology, or a related field. Equivalent relevant experience will be considered.

- Minimum of 5 years of experience in cybersecurity risk management, supplier security, vendor risk, audit, compliance, or a related field, with experience supporting third-party risk assessments.

- Strong understanding of cybersecurity risk management principles, security controls, and common assessment practices.

- Knowledge of relevant frameworks and standards such as NIST, ISO/IEC 27001, and IEC 62443 is preferred.

- Ability to analyze security documentation, identify control gaps, document risk clearly, and recommend practical remediation actions.

- Excellent analytical, problem-solving, written communication, and interpersonal skills.

- Ability to work collaboratively with technical teams, procurement, legal, audit, business stakeholders, and external vendors.

Preferred Qualifications

- Experience with third-party risk management platforms such as UpGuard, ServiceNow, Aravo, or Archer is preferred.

- Relevant certifications such as CRISC, CISSP, CISM, or comparable risk and security certifications are preferred.

- Experience developing reports, dashboards, workflow automation, or data-driven risk metrics is preferred.

- Experience with vendor risk management and principles for embedded components in OT environments.

Key Competencies

- Perform third party risk management of vendors continuously.

- Maintain vendor security assessment questionnaires to remain current with global trend in the energy sector.

- Prioritize security remediation with vendors to improved trust transparency.

- Manage multiple vendor assessments with JIRA kan-ban boards to ensure accountability.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Third Party Security Risk Analyst (Bengaluru)
🏢 Fluenc
📍 Bengaluru