TPRM R&C Analyst

Mphasis; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Mphasis is seeking a TPRM R&C Analyst in Bengaluru to safeguard technology landscapes by proactively identifying, assessing, and mitigating risks across operational, information, and cyber security domains.

Two to three years of hands-on experience in risk management and security controls is required. Shift is work-from-office at Bagmane World Technology Center, KR Puram, Marathahalli Outer Ring Road, Mahadevapura.

Qualifications

• 2–3 years of hands-on experience in operational security, risk management or related disciplines.
• Strong understanding of IT security principles, infrastructure security and risk management frameworks such as NIST and ISO 27001.
• Experience conducting risk assessments, implementing security controls and managing remediation workflows.
• Certifications such as CRISC or CISSP are highly desirable.

Responsibilities

• Lead vulnerability management: identify, track and remediate vulnerabilities across systems; report and escalate unresolved issues.
• Conduct risk identifications and assessments; collaborate with stakeholders to drive remediation and monitor progress.
• Maintain up-to-date IT security risk evaluations for infrastructure, apps and services; ensure alignment with risk appetite and compliance standards.
• Coordinate audits and compliance activities; support timely closure of findings per regulatory requirements.
• Perform security evaluations to validate controls and identify improvement areas.
• Prioritize threats and vulnerabilities based on impact and likelihood to focus mitigations.
• Oversee security controls implementation and create dashboards to report risk posture and control performance.
• Communicate risk insights clearly to technical and business stakeholders with regular updates.

Skills

Risk assessments

Vulnerability remediation

IT security

NIST & ISO27001

Stakeholder communication

Job description

The TPRM R&C Analyst plays a critical role in safeguarding the organizations technology landscape by proactively identifying, assessing, and mitigating risks across operational, information, and cyber security domains. This role demands a strong analytical mindset, technical acumen, and the ability to collaborate effectively with cross-functional teams to ensure robust risk governance and compliance.

Key Responsibilities:

• Vulnerability Management:
  Lead the identification, tracking, and remediation of vulnerabilities across operating systems and penetration testing outputs. Ensure timely reporting and escalation of unresolved issues.
• Risk Identification & Assessment:
  Conduct comprehensive assessments to identify emerging threats and risks. Collaborate with stakeholders to drive remediation efforts and monitor progress.
• IT Security Risk Evaluation:
  Maintain current and accurate risk assessments for infrastructure, applications, and services. Ensure alignment with organizational risk appetite and compliance standards.
• Audit & Compliance Coordination:
  Facilitate the closure of audit findings by supporting operational teams and ensuring adherence to timelines and regulatory requirements.
• Security Evaluations:
  Perform in-depth security assessments and evaluations to validate the effectiveness of existing controls and identify areas for improvement.
• Threat Prioritization:
  Analyze and prioritize vulnerabilities and attack vectors based on potential impact and likelihood, enabling focused mitigation strategies.
• Security Control Oversight:
  Monitor the implementation and effectiveness of security controls. Develop dashboards and reports to provide visibility into risk posture and control performance.
• Stakeholder Communication:
  Deliver clear and actionable risk insights to technical and business stakeholders. Provide regular updates on IT risk trends, mitigation plans, and strategic recommendations.

Candidate Profile:

• Experience:
  2 to 3 years of hands-on experience in operational security, risk management, or related disciplines.
• Technical Expertise:
  Solid understanding of IT security principles, infrastructure security, and risk management frameworks such as NIST and ISO 27001.
• Skills:
  Proven ability to conduct risk assessments, implement security controls, and manage vulnerability remediation processes.
• Certifications (Preferred):
  Industry-recognized certifications such as CRISC, CISSP, or equivalent is highly desirable.

Shift Timings: (Work from Office)

• 2:30 PM to 11:30 PM IST
• 3:30 PM to 12:30 AM IST

LOCATION: Bagmane World Technology Center, KR Puram, Marathahalli Outer Ring Road, Mahadevapura