ITandData CS 3rd Party Risk Mgt

Infosys; Hyderabad; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Infosys Hyderabad is seeking a Cyber Risk Management specialist to drive risk assessments, governance, and regulatory compliance across global units.

You will lead risk registers, KRIs, and KPIs, develop mitigation strategies, and deliver analytics-driven reports to senior stakeholders. Strong communication and problem-solving skills are essential for success in a dynamic, multinational environment.

Qualifications

• Experience in cyber risk management and risk assessments.
• Familiarity with governance, risk and compliance (GRC) processes.
• Knowledge of security frameworks (ISO 27001, NIST, CIS Controls).
• Understanding of cloud, infrastructure, application security, and data protection concepts.
• Ability to advise on mitigation strategies and track remediation.

Responsibilities

• Manage risk registers, KRIs, KPIs and remediation tracking.
• Prepare and present risk reports and dashboards for stakeholders.
• Advise business on mitigation strategies tailored to each risk.
• Coordinate with global teams and maintain governance discipline.
• Ensure compliance with NIS2, GDPR and regulatory requirements.

Skills

Cyber risk management

Risk assessment

GRC processes

ISO 27001/NIST/CIS

Cloud security basics

Data protection concepts

Stakeholder mgmt

Communication skills

Analytical skills

Problem-solving

Tools

ServiceNow GRC

Archer

Power BI

Tableau

Excel advanced analytics

Job description

Job Description:

• Must Have
• Functional & Technical Skills[RN2.1][SK2.2]
• Cyber Risk Management and Risk Assessment methodologies.
• Strong understanding of Information Security and Cybersecurity principles.
• Knowledge of Governance, Risk, and Compliance (GRC) processes.
• Experience with cybersecurity frameworks and standards (ISO 27001, NIST, CIS Controls).
• Basic understanding of cloud security, infrastructure security, application security, and data protection concepts.
• Experience in preparing and advising business on different mitigation strategies that would best fit the situation
• Experience managing risk registers, KRIs, KPIs, and remediation tracking.
• Strong reporting, dashboarding, and analytical skills. Behavioral Competencies
• Strong stakeholder management and influencing skills.
• Flexibility and ability to adjust approach, frameworks and controls to specific business cases and risks
• Excellent communication and presentation capabilities.
• Analytical and problem-solving mindset.
• Ability to prioritize and manage multiple risks and initiatives.
• Collaboration and teamwork across global and multicultural environments.
• High attention to detail and governance discipline. Good to Have
• Functional & Technical Skills
• Experience with NIS2, GDPR, and other regulatory frameworks.

• Knowledge of Third-Party Risk Management (TPRM).
• Experience with cybersecurity risk management tools and GRC platforms (e.g., ServiceNow GRC, Archer).
• Understanding of Security Operations, Vulnerability Management, and Incident Response processes.
• Data analytics and reporting automation capabilities (Power BI, Tableau, Excel advanced analytics).