Lead Security Analyst - Risk

TriNet; Hyderabad; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

TriNet is looking for a senior position in security risk assessment in Hyderabad, requiring 8+ years of experience and extensive knowledge of security frameworks like ISO 27001 and GDPR.

The candidate will perform risk assessments and collaborate across teams, ensuring alignment with third-party risk management principles.

This is a fully on-site role in a pleasant office environment dedicated to delivering high-quality service.

Qualifications

• 8+ years of experience in security risk assessment or information security risk analysis.
• In-depth knowledge of security frameworks such as ISO 27001 and GDPR.
• Strong understanding of information security principles and third-party risk management.

Responsibilities

• Conduct risk assessments and vulnerability assessments.
• Perform risk quantification and estimate impact and loss exposure.
• Collaborate across teams to ensure program needs are satisfied.

Skills

Security risk assessment

Third-party risk management

Vulnerability assessments

Analytical skills

Communication skills

Education

Bachelor’s degree in computer science, Information Security, Risk Management, or related field

Tools

GRC platforms

ProcessUnity

Vulnerability scanners

Job description

Education

• Bachelor’s degree in computer science, Information Security, Risk Management, or related field.

Training Requirements (licenses, Programs, or Certificates)

• Relevant certifications such as CISSP, CISA, CRISC, or equivalent are highly desirable.

Experience

• 8+ years of experience in performing security risk assessment, third-party risk management, vendor risk assessment, or information security risk analysis, preferably in a senior or lead role.
• In-depth knowledge of security frameworks, standards, and regulations such as ISO 27001, NIST, GDPR, CCPA, etc.
• Strong understanding of information security principles, practices, and technologies, with a focus on third-party risk management.
• Demonstrated knowledge of relevant privacy and data protection regulations, as well as familiarity with industry standards for security and risk management.
• Experience in conducting risk assessments, vulnerability assessments, and penetration testing of third-party systems and networks.
• Ability to perform risk quantification (FAIR or equivalent), including estimating likelihood, impact, and loss exposure, is highly desired.
• Familiarity with security tools and technologies used for third-party risk management, such as GRC platforms, ProcessUnity, vulnerability scanners, and risk assessment tools.
• Experience with vulnerability management, threat intelligence, fraud, physical security, cloud, application security/SDLC or emerging tech is a plus.
• Excellent analytical and problem‑solving skills, with the ability to assess and prioritize risks effectively.

Other Knowledge, Skills, and Abilities

• Excellent written and verbal communication skills, interpersonal and collaborative skills.
• An understanding of business needs and dedication to delivering high-quality, timely, and efficient service to the business.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.
• An ability to effectively collaborate across multiple teams and ensure program needs are satisfied through interpersonal and trusted communication.

Work Environment

• Work in a clean, pleasant, and comfortable office work setting. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable persons with disabilities to perform the essential functions.
• This position is 100% in office.

Please Notice: TriNet reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Position functions and qualifications may vary depending on business necessity.

TriNet is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact [e-mail] to request such an accommodation.