Cyber Security Analyst

Fulcrum Digital Inc; Pune City; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A leading company in IT Services and Consulting is seeking a Third-Party Security Analyst to perform comprehensive security assessments of vendors and suppliers. The role involves analyzing security controls, documenting risks, and coordinating with stakeholders to manage third-party security risks effectively. Ideal candidates will have a strong background in cybersecurity, excellent communication skills, and the ability to work independently. This full-time position offers an opportunity to contribute to the security of the organization’s supply chain.

Qualifications

• 4 to 6 years of total experience in cybersecurity.
• Experience performing technical security audits or third-party assessments.

Responsibilities

• Conduct technical security assessments of third-party vendors.
• Analyze security assessment findings and document risks.
• Develop and publish policies for third-party risk management.

Skills

Technical Security Audits

Cyber Vulnerabilities

Communication

Education

Security Certifications

Tools

AWS

Azure

GCP

Job description

Cyber & Information Security team is seeking a Third-Party Security Analyst. Reporting to the Director of Cyber & Information Security, the analyst will perform third-party security assessments. You will work with a team of professional Security Analysts leveraging Next-Gen security tools to perform the full lifecycle of third-party reviews from onboarding to real-time monitoring of vendors and suppliers.

Total Experience – 4 to 6 years

Responsibilities, Functions and Duties

1. Conduct technical security assessments of third-party vendors, suppliers, and partners by reviewing their security controls, adherence to regulations, compliance, and contracts.
2. Analyze third-party security assessment findings and document security risks within the management software for tracking of risk reporting.
3. Coordinate with various stakeholders to verify and remediate security risk findings.
4. Develop KRIs and KPIs around third-party risk assessments and the remediation of key findings.
5. Develop, update, and publish policies and standard operating procedures for third-party risk management.
6. Continuously monitor for active vulnerabilities and cyber events against our vendors and suppliers.
7. Participate in third-party cyber incident response by reaching out to impacted vendors and tracking remediation.

Requirements

Knowledge and Requirements

1. Previous experience performing technical security audits or third-party assessments.
2. Understanding of current cyber vulnerabilities & threats.
3. Knowledge of security assessments (SOC reports, ISO/NIST, vulnerability and pen testing assessments).
4. Fundamental understanding of system and network security principles and technology.
5. Ability to interface with a wide audience of technical and non-technical personnel.
6. Ability to prioritize and manage workloads and deadlines.
7. Excellent written and verbal communication skills.
8. Self-starter who is motivated and driven to learn.

Preferred Qualifications

1. Prior experience and/or certifications in AWS, Azure, and/or GCP.
2. Experience in performing third-party assessments of SaaS providers and vendors operating in cloud environments.
3. Any security-focused certifications.
4. 3-5 years of cybersecurity-related experience.

Additional Details

• Seniority level: Not Applicable
• Employment type: Full-time
• Job function: Information Technology
• Industries: IT Services and IT Consulting