Security Analyst - Risk Management

Overview

Security Analyst on Gartner's Governance Risk Management team, providing IT risk management, IT policies, standards and controls, and audit/governance oversight.

What you'll do

• Manage risks around client engagements from an InfoSec perspective.
• Review and respond to client questions around their data and how it is protected.
• Partner with IT and others in InfoSec to ensure accurate and consistent information is given to clients.
• Review Information Security sections in contracts.
• Partner with others in InfoSec to create a repeatable reporting process for vulnerabilities.
• Partner with IT, others in InfoSec, legal and contracts to review documents and contracts to understand what can be agreed to.
• Partner with the contracts administration team to handle all client requests.
• Maintain accurate Q&A libraries within a tool and/or offline.
• Prioritize requests to ensure deadlines are met.
• Continuously look for ways to improve the process.
• Take ownership of assignments and drive them to completion.
• Work collaboratively across functional areas for innovation to turn new ideas into reality.
• Heavy focus on consulting clients; next focus on overall client efforts, and assist others on the team with Risk, Audit, Policy and Certification/Assessment efforts as time allows.

What you'll need

• Must have 2-4 years of experience in IT and/or Information Security.
• Ideal candidates have experience in IT with an overall understanding of Information Security and vulnerabilities.
• Strong communication skills to partner with many departments within Gartner and occasionally work directly with clients.
• Strong attention to detail to ensure accurate and consistent answers and thorough reviews of contracts/documents.
• Overall IT and Information Security knowledge.
• Proven communication, collaboration, and critical thinking skills.
• Ability to define and communicate risk in business-relevant language to non-technical audiences.
• Ability to work independently or within a team proactively in a time-sensitive operations environment.

Nice to have

• Innovation mindset: takes opportunities to make existing processes more efficient and thinks "automation first".
• Strong desire to improve upon and broaden their skills in information security.

Details

• Location: Gurgaon.
• Hybrid work environment: working virtually when it's productive to do so and getting together with colleagues in the office.