Security Risk Analyst

McCormick & Company; Gurugram District; Hybrid; INR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Competitive compensation

Career growth opportunities

Flexibility and support for diverse life stages

Wellbeing programs

Job summary

A global food company is seeking a Security Risk Analyst in Gurugram, India to join their Cybersecurity Governance team. This role involves assessing security risks, ensuring compliance, and executing audit plans. The ideal candidate should possess a Bachelor's degree in a relevant field and at least 6 years of experience in audit or IT. The position offers competitive compensation, career growth, and support for diverse life stages.

Qualifications

• 6+ years of experience related to internal/external audit or IT.
• Experience with Sarbanes-Oxley or other internal control projects.

Responsibilities

• Assess security risk and establish security standards.
• Conduct analyses and develop a comprehensive view of risk.
• Draft clear, concise audit reports.

Skills

Analytical skills

Project management

Problem-solving

Communication skills

Education

Bachelor’s degree in Information Technology, Information Systems, Risk Management, Accounting, or similar

Job description

Position Overview

Security Risk Analyst – Hybrid (50/50) capacity. This role is a key member of the Cybersecurity Governance, Risk, and Compliance team reporting to the Senior Manager, Cybersecurity Governance, Risk & Compliance. Responsible for assessing security risk, establishing security standards, and ensuring compliance across all disciplines of the information security domain supporting McCormick’s global brands and subsidiaries. Requires strong work ethic, organizational, project management, and problem‑solving skills, along with excellent verbal and written communication across all levels.

Key Responsibilities

• Intake and analysis of identified risks from sources such as audits, compliance checks, automated vulnerability systems, and other internally or externally reported risks. Process risk acceptance requests and provide analyses to enable business leaders to determine appropriate risks.
• Complete analyses and reports and work with the Senior Manager, Cybersecurity GRC to develop a comprehensive view of risk across the company.
• Review and track action plans developed by risk owners and ensure they are completed appropriately.
• Process policy exception requests as needed or ad‑hoc risk analysis; execute detailed audit plans, identify risk areas, develop action plans, and monitor completion.
• Draft clear, concise audit reports that communicate key insights and observations to functional/business personnel and executive leadership.
• Demonstrate effective teaming skills with ability to work independently; lead initiation, execution, and completion of key work tasks.

Desired Candidate Profile

• Bachelor’s degree in Information Technology, Information Systems, Risk Management, Accounting, or similar.
• 6+ years of experience related to internal/external audit, information technology, or internal controls.
• Experience with Internal/External Audit, Sarbanes‑Oxley, or other internal control (IT or operational) projects.

Benefits

• Competitive compensation
• Career growth opportunities
• Flexibility and support for diverse life stages and choices
• Wellbeing programs

McCormick & Company is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

As a general policy, McCormick does not offer employment visa sponsorship upon hire or in the future.