Third-Party Security Analyst

Tradeweb Europe Limited; Bengaluru; On-site; INR 350,000 - 550,000; Full time

Job summary

Tradeweb Markets is seeking a Third-Party Security Analyst to oversee cybersecurity risk posed by vendors and service providers in a regulated financial environment. You will review SOC 1/2, ISO certifications, and risk documentation while coordinating with Procurement, Legal, Compliance, and Technology teams.

The ideal candidate has 7+ years in cyber risk management, strong communication skills, and experience using GRC platforms to track vendor risks and remediation efforts.

Qualifications

• 7+ years of experience in cybersecurity, IT risk management, third-party risk management, or information security.
• Hands-on experience reviewing vendor security documentation (SOC 1/SOC 2 reports, ISO certifications).
• Experience in regulated financial environments and ability to communicate risk to diverse stakeholders.

Responsibilities

• Lead and perform cybersecurity risk assessments for third-party vendors and service providers.
• Review vendor security artifacts (SOC reports, ISO certifications) and risk documentation.
• Define vendor risk ratings and document remediation plans with cross-functional teams.
• Maintain vendor risk records and KPIs in GRC platforms and support audits.

Skills

Cybersecurity

IT risk management

Third-Party risk management

Information security

Risk communication

Regulated environments

Analytical skills

Documentation skills

Education

CISA

CRISC

CISSP

Security+

Tools

GRC platforms

GRC tools

Job description

Functional Title:

Third-Party Security Analyst

Experience:

7+ years

Company Description

Tradeweb Markets is a world leader in the evolution of electronic trading. A fintech company serving approximately 2,500 clients—including the world’s largest banks, asset managers, hedge funds, insurance companies, wealth managers, and retail clients—in more than 65 countries across the globe. Since our first trade in 1998, we have helped transform and electronify the fixed income markets.

Mission:

Move first and never stop. Collaborate with clients to create and build solutions that drive efficiency, connectivity, and transparency in electronic trading.

Tradeweb Markets LLC (“Tradeweb”) is proud to be an EEO Minorities/Females/Protected Veterans/Disabled/Affirmative Action Employer. https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf

Group Details

Tradeweb’s Cyber Security team plays a critical role in protecting the firm, its clients, and its employees from an evolving third-party threat landscape. The Vendor Cyber Risk Analyst will be responsible for assessing, monitoring, and managing cybersecurity risks introduced by third-party vendors and service providers.

This role works closely with Procurement, Legal, Compliance, Technology, and Business teams to ensure vendor risks are identified, assessed, and mitigated in alignment with Tradeweb’s risk appetite and regulatory obligations. The ideal candidate brings strong cyber risk fundamentals, excellent communication skills, and experience operating in regulated financial environments.

Job Responsibilities

• Lead and perform cybersecurity risk assessments for third-party vendors, suppliers, and service providers
• Review and analyze vendor security artifacts, including SOC 1/SOC 2 reports and ISO 27001 certifications
• Review penetration testing summaries, architecture diagrams, technical documents, and security policies
• Evaluate vendor responses to cybersecurity questionnaires and due diligence requests
• Define vendor risk ratings and document identified risks, gaps, and remediation plans
• Partner with Risk, Procurement, and Legal teams to support vendor onboarding and contract reviews
• Track vendor remediation efforts and follow up on outstanding risk items
• Monitor vendor-related security incidents and elevate issues in accordance with incident response procedures
• Act as a subject matter expert and advisor to internal stakeholders on vendor cyber risk matters
• Maintain vendor risk records, metrics, and reporting within GRC or vendor risk management platforms
• Drive continuous improvement of third-party cyber risk management processes, standards, and controls
• Support regulatory exams, audits, and internal reviews related to third-party cyber risk

Required Qualifications

• 7+ years of experience in cybersecurity, IT risk management, third-party risk management, or information security
• Strong understanding of cybersecurity principles, including access control, data protection, network security, and incident response
• Hands-on experience reviewing vendor security documentation (SOC reports, ISO certifications, risk assessments)
• Solid knowledge of security frameworks and standards such as NIST, ISO 27001, SOC, and CIS
• Experience using GRC or third-party risk management tools
• Ability to assess and communicate risk clearly to both technical and non-technical stakeholders
• Strong analytical, documentation, and organizational skills
• Proven ability to manage multiple vendor assessments simultaneously and meet deadlines with minimal supervision
• Basic awareness of AI-enabled features within cybersecurity or vendor risk platforms (e.g., automated risk scoring, workflow automation)
• Ability to interpret AI-assisted insights and apply human judgment to validate findings

Preferred Qualifications

• Experience in financial services or other highly regulated industries
• Professional certifications such as CISA, CRISC, CISSP, or Security+
• Familiarity with security rating services (e.g., BitSight, SecurityScorecard)
• Experience producing KPIs and risk reporting for senior management