Third Party Cyber Risk Services Operations - Lead Analyst

First Tek, Inc.; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Part time

Job summary

First Tek, Inc. is seeking a Lead Analyst to support Third-Party Cyber Risk Services operations. You will manage intake, execute workflows, and deliver risk assessments to drive defensible decisions with cross-functional partners. The role emphasizes governance, process improvements, and data-driven risk insights.

The position requires experience in TPRM, CSF, and strong communication skills to influence stakeholders and strengthen organizational cyber resilience.

Qualifications

• Strong experience in Third-Party Risk Management (TPRM).
• Knowledge of information security concepts: threat, vulnerability, impact.
• Hands-on with NIST Cybersecurity Framework (CSF).
• Analytical & problem-solving skills with risk analysis capability.
• Excellent written and verbal communication and stakeholder influence.

Responsibilities

• Manage and maintain the third-party risk management framework.
• Perform inherent and residual risk assessments using data-driven methods.
• Define, implement, and track mitigation and risk treatment plans.
• Partner with Procurement, Legal, Risk and Engineering teams to communicate risk insights.
• Develop risk metrics and dashboards to track trends and posture.

Skills

TPRM

NIST CSF

Risk Analysis

Stakeholder Comm.

Agile & Execution

Job description

Role:

Third Party Cyber Risk Services Operations Lead Analyst

Location:

Bellandur, Bangalore

Work Timings:

01:30 PM 10:30 PM

Type:

Contract to hire

Work Mode:

Monday (WFH), TuesdayFriday (WFO)

Experience:

1012 Years

Job Summary:

Role Summary

The Lead Analyst will support Third-Party Cyber Risk Services operations by managing daily intake, executing workflows, and delivering data-driven risk assessments. This role is responsible for making defensible third-party risk decisions (including accept/reject), partnering with cross-functional stakeholders, and strengthening organizational cyber resilience.

Key Responsibilities

Third-Party Risk Management

Manage and maintain the third-party risk management framework Perform inherent and residual risk assessments using data-driven methodologies Identify cyber risks associated with third-party vendors Risk Analysis & Mitigation

Define, implement, and track mitigation and risk treatment plans

Analyse trade-offs to manage residual risk effectively Support defensible risk decisions aligned with business objectives Stakeholder Collaboration

Partner with: Procurement (contract advisors, category managers) Legal teams Business/Product owners Risk managers & analysts Security engineers & threat intelligence teams Communicate risk insights, impacts, and recommendations clearly Operations & Delivery

Manage intake and prioritize work based on risk Meet SLAs without compromising quality Handle escalations and resolve high-risk issues promptly Process Improvement & Automation

Define and enhance processes, procedures, and tools Identify efficiency opportunities and leverage automation/AI Drive continuous improvement initiatives Metrics & Reporting

Develop and analyse risk metrics and dashboards Track trends, risk posture, and control effectiveness

Required Qualifications

Core Expertise

Strong experience in Third-Party Risk Management (TPRM) Knowledge of information security concepts: threat, vulnerability, impact Ability to apply risk concepts to policies, standards, and controls Framework Knowledge

Hands-on experience with NIST Cybersecurity Framework (CSF) Understanding of control effectiveness and compliance assurance Analytical & Problem-Solving Skills

Strong critical thinking and risk analysis capability Ability to break down complex problems and work in ambiguous environments Experience in designing and maturing processes Communication & Leadership

Excellent written and verbal communication skills Ability to influence stakeholders across levels Strong cross-functional collaboration skills Agile & Execution Skills

Experience working in agile environments Ability to prioritize tasks, remove blockers, and adapt quickly

Key Competencies

Risk Assessment & Decision-Making Cybersecurity & Compliance Stakeholder Management Process Optimization Data-Driven Insights Automation & Innovation .