Our partner is looking for a Cyber Risk Analyst based in India. Join a mission-driven, technology-focused organization where cybersecurity and risk management are essential to protecting business operations and enabling sustainable growth. As a Cyber Risk Analyst, you will strengthen the organization's governance, risk, and compliance framework through security audits, third-party assessments, and business continuity testing. You will help identify vulnerabilities, evaluate risks, and coordinate remediation efforts to improve the organization's security posture. Working closely with technical teams, business stakeholders, and external vendors, you will translate security requirements into practical controls and measurable improvements. You will also contribute to the implementation of recognized frameworks, including NIST Cybersecurity Framework and ISO 27001, while supporting disaster recovery readiness and security awareness initiatives. This opportunity is ideal for a proactive cybersecurity professional who enjoys cross-functional collaboration, clear communication, and taking ownership of risk reduction in a dynamic, international setting. Accountabilities - Cybersecurity audits and assessments: Plan and conduct internal cybersecurity audits and control reviews across applications, infrastructure, and business processes. Vendor and third-party risk management: Perform security due diligence for vendors and external partners by reviewing security questionnaires, certifications, policies, and technical controls. Identify potential risks, recommend mitigation measures,



and support the inclusion of appropriate security requirements in contracts when necessary. - Business continuity and disaster recovery: Collaborate with stakeholders to maintain, validate, and improve business continuity and disaster recovery (BCP/DR) plans. Cyber governance and compliance: Maintain and improve security policies, standards, procedures, and guidelines, ensuring alignment with NIST Cybersecurity Framework, ISO 27001, and applicable regulatory requirements. - Risk assessment and treatment: Maintain the cybersecurity risk register and work with control owners and business stakeholders to identify, assess, and prioritize risks. Prepare reports and dashboards covering audit findings, risk exposure, vendor security assessments, business continuity exercise results, and progress toward ISMS and NIST CSF objectives. - Security awareness and training: Develop and deliver employee awareness sessions and targeted training on topics such as phishing prevention, secure data handling, and role-specific security responsibilities. - Identify opportunities to improve security controls, governance processes, risk reporting, and cross-functional collaboration while supporting the effective implementation of cybersecurity standards and best practices. Requirements - A bachelor's degree in an engineering discipline. - At least three years of professional experience in cybersecurity governance, risk, and compliance (GRC). - Practical experience implementing security controls and processes across business functions in alignment with frameworks such as NIST Cybersecurity Framework and ISO 27001.

📌 Cyber Risk and Security Analyst (India)
🏢 Jobgether
📍 India