IT ANALYST

Tata Consultancy Services; Milford (CT); On-site; USD 115,000 - 125,000; Full time

Job summary

A leading IT services company is seeking a Mid-Senior level professional to develop a Secure Software Development Framework for onboarding third-party vendors. The role involves defining security control requirements, evaluating vendor practices, and ensuring compliance with industry standards. Ideal candidates will have experience in security assessments and a strong knowledge of Secure SDLC methodologies. This full-time position offers a competitive salary range of $115,000 to $125,000 annually.

Qualifications

• 3-5 years experience in third-party security assessments and Secure SDLC.
• Strong knowledge of security control frameworks and methodologies.

Responsibilities

• Develop and implement a structured Secure Software Development Framework for third-party vendors.
• Collaborate with procurement and compliance teams to incorporate security standards.

Skills

Secure Software Development Framework

Secure SDLC

Security assessments

Analytical skills

Vendor risk management

Education

Security certifications

Tools

ServiceNow

SAST

DAST

SCA

CSPM

SIEM

Job description

Tata Consultancy Services provided pay range

This range is provided by Tata Consultancy Services. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$115,000.00/yr - $125,000.00/yr

Job responsibilities

• Develop and implement a structured Secure Software Development Framework (SSDF) for onboarding third-party vendors.
• Define and enforce security control requirements for vendors at each phase of the Secure SDLC.
• Evaluate vendors' software development practices, security policies, and risk management capabilities.
• Ensure vendors adhere to secure coding, threat modeling, and security testing (SAST, DAST, SCA).
• Collaborate with procurement, legal, and compliance teams to incorporate security standards into vendor agreements.
• Define and validate security controls required for third-party vendor engagements.
• Assess vendor compliance with industry standards such as NIST SSDF, ISO 27001, SOC 2, PCI DSS, and CIS Benchmarks.
• Work with internal security and risk teams to document and track security findings related to vendors.
• Establish continuous monitoring processes for third-party security risks.
• Configure and optimize the ServiceNow GRC module to support third-party vendor onboarding and control validation.
• Automate security control assessment workflows within ServiceNow GRC.
• Develop risk scoring mechanisms and vendor compliance tracking dashboards in ServiceNow.
• Integrate UDCRM with security tools to enable automated evidence collection and risk analysis.
• Provide training and support on ServiceNow GRC security workflows for internal teams.

Qualifications and skills

• 3-5 years of experience in third-party security assessments, Secure SDLC, and security control validation.
• Strong knowledge of Secure Software Development Framework (SSDF) and Secure SDLC methodologies.
• Hands-on experience implementing security processes in ServiceNow UDCRM.
• Experience with security control frameworks such as NIST SSDF, ISO 27001, SOC 2, PCI DSS, and OWASP.
• Knowledge of security testing tools like SAST, DAST, SCA, CSPM, and SIEM.
• Strong analytical skills with the ability to assess security risks and implement mitigation plans.
• Security certifications such as CISSP, CSSLP, CTPRP, CISM, or CRISC.
• Experience with vendor risk management (VRM) programs and regulatory compliance.
• Familiarity with DevSecOps, container security, cloud security (AWS, Azure, GCP), and Infrastructure as Code.
• ServiceNow certifications (e.g., Certified Implementation Specialist – Risk and Compliance).

Additional information

Salary Range: $115,000-$125,000 a year

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

IT Services and IT Consulting

Referrals increase your chances of interviewing at Tata Consultancy Services by 2x