Position Summary

We are seeking a detail-oriented and analytical Security Risk Analyst with 3–4 years of experience in cybersecurity and risk management. The candidate will be responsible for identifying, assessing, and mitigating information security risks while ensuring compliance with organizational policies and regulatory requirements.

Key Responsibilities

·       Conduct risk assessments and threat analysis across IT systems, applications, and infrastructure

·       Identify vulnerabilities and recommend mitigation strategies

·       Monitor security posture and ensure adherence to risk management frameworks (ISO 27001, NIST, etc.)

·       Collaborate with IT and business teams to address security gaps

·       Develop and maintain risk registers and reports

·       Support audits, compliance initiatives, and regulatory requirements

·       Perform third-party/vendor risk assessments

·       Assist in incident response and root cause analysis

·       Stay updated with emerging security threats and industry best practices

Required Skills & Qualifications

·       Bachelor’s degree in Computer Science, Information Security, or related field

·       3–4 years of experience in cybersecurity, risk assessment, or IT security

·       Strong understanding of risk management frameworks (ISO 27001, NIST, COBIT)

·       Knowledge of vulnerability assessment tools and techniques

·       Familiarity with security tools (SIEM, DLP, endpoint protection)

·       Understanding of regulatory requirements (GDPR, HIPAA, etc. as applicable)

·       Strong analytical, problem-solving, and communication skills

·       Ability to work independently and in cross-functional teams

Preferred Certifications

·       Certified Information Systems Security Professional (CISSP)

·       Certified Information Security Manager (CISM)

·       Certified in Risk and Information Systems Control (CRISC)

·       ISO 27001 Lead Implementer/Auditor

Key Competencies

·       Risk Analysis and Mitigation

·       Attention to Detail

·       Communication and Reporting

·       Stakeholder Management

·       Continuous Learning Mindset