Risk Analyst

Overview

Assess and manage cyber risks to protect the security, integrity and resilience of the organization's operations and services, supporting the Australian team from India across GRC and SecOps functions.

What you'll do

• Conduct audit management against security standards such as ISO 27001, SOC2 Type II and client contract obligations.
• Perform BCP/DR testing.
• Manage client cyber risk.
• Contribute to cyber security awareness training.
• Assist stakeholders with security metrics reporting.
• Support security incident response.
• Manage supply chain risk and audit.
• Manage account access and revalidation.
• Maintain baseline security management (secure configuration).
• Conduct change management reviews from a cyber security context.
• Coordinate penetration testing.
• Manage vulnerabilities and threats.

What you'll need

• 3 to 6 years of experience in cyber security.
• Solid understanding and experience of cyber security controls across people, process and technology.
• Proven experience with cyber control metrics management.
• Exceptional communication and written skills.
• Experience engaging technical and non-technical stakeholders.
• Understanding of cyber governance, risk management and compliance frameworks such as NIST, ISO 27001, ISO 27035 and SOC2.
• Strong and demonstrated experience in information security, with a focus on cyber GRC and SecOps.

Nice to have

• Industry certifications such as CISSP, CSSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or Implementer, or ISO 27035.
• Cyber Security, Computer Science or Technology degree.

Details

• Location: Hyderabad, India.
• Workplace type: Hybrid.
• Exposure to working in a managed services environment.