Virtual Information Security Risk Analyst

Naukri Mitra; United States; A distancia; USD 111.000 - 136.000; Jornada completa

Descripción de la vacante

Naukri Mitra is seeking a Virtual Information Security Risk Analyst to identify and manage threats across networks, cloud environments, and data systems. This role focuses on scalable cybersecurity protocols that protect operations while enabling safe digital growth, and it emphasizes collaboration with global teams.

The position supports incident response planning, risk modeling, and executive reporting, using tools like Nessus, Cortex XSOAR, Power BI, and SIEMs to monitor risk posture in a

Formación

• Identify weaknesses in business applications and systems before exploitation.
• Perform regular cyber hygiene assessments and recommend improvements.
• Map security controls to industry standards (NIST, ISO 27001, SOC 2).
• Coordinate with legal and compliance to maintain regulatory readiness.
• Lead vulnerability assessments and incident response planning.

Responsabilidades

• Risk Identification & Management: Evaluate apps and systems to detect weaknesses.
• Security Controls Implementation: Design and map internal controls to standards.
• Vulnerability Assessment: Deploy scanners and coordinate red/blue team exercises.
• Incident Response Strategy: Develop IR plans with escalation matrices and timelines.
• Reporting & Communication: Create dashboards and executive summaries.

Conocimientos

Cyber threats knowledge

EDR/DLP experience

Network security monitoring

MFA/SSO/PKI

Automation scripting

API integration

Educación

Bachelor’s degree in Cybersecurity/CS/IT

Master’s degree preferred

Herramientas

Nessus

OpenVAS

Zeek

Suricata

Snort

Power BI

Tableau

Grafana

Cortex XSOAR

Splunk

Elastic Stack

Jenkins

GitLab CI/CD

Descripción del empleo

Virtual Information Security Risk Analyst (Remote) Role Overview

Work Location Fully Remote Flexible across global time zones

Employment Type Full-time

Annual Salary: $123,577

About the Position

As a Virtual Information Security Risk Analyst, you will be a digital guardian by identifying and managing potential threats across networks, cloud systems, and organizational data environments. Your work will be pivotal in developing scalable cybersecurity protocols that protect the organization from vulnerabilities, safeguard information accuracy, and uphold adherence to advancing industry standards. You will act as a strategic advisor, enabling the business to confidently expand its digital operations while protecting against cyberattacks and data breaches. Working alongside global teams, you will influence security decisions that will directly impact thousands of end-users and stakeholders.

Culture of Innovation

We are a technology‑first organization, placing high value on continuous innovation and strategic foresight. Our cybersecurity infrastructure is enhanced with automation, threat intelligence algorithms, and machine learning. You'll immerse yourself in an environment that promotes experimentation with new tools like AI‑enhanced detection systems, blockchain for audit transparency, and behavior analytics to detect anomalies faster than traditional methods. We foster a collaborative culture where information security isn’t siloed—a shared responsibility supported by leadership and embraced across departments.

Responsibilities

Risk Identification & Management

• Evaluate business applications and systems to detect weaknesses before they can be exploited
• Utilize advanced threat modeling techniques to anticipate potential attack vectors
• Perform regular cyber hygiene assessments and recommend improvements
• Investigate historical security incidents for pattern analysis and future prevention

Security Controls Implementation

• Map existing policies to industry standards, including NIST, ISO 27001, and SOC 2
• Design internal controls that align with HIPAA, PCI DSS, GDPR, and CCPA compliance frameworks
• Build zero‑trust architecture principles into security strategies
• Collaborate with legal and compliance units to maintain regulatory readiness

Vulnerability Assessment

• Deploy scanners such as Nessus and OpenVAS to identify internal and external vulnerabilities
• Coordinate red team‑blue team exercises to evaluate incident response efficiency
• Collaborate with DevSecOps to build secure code checkpoints into CI/CD pipelines
• Manage patch management cycles and software inventory tracking

Incident Response Strategy

• Develop a well‑documented IR plan, including an escalation matrix and communication protocols
• Conduct regular simulations and after‑action reviews to refine response effectiveness
• Integrate SOAR platforms like Cortex XSOAR to automate incident triage and response workflows
• Provide detailed incident reports to leadership with remediation timelines

Reporting and Communication

• Deliver insightful dashboards using Power BI and Tableau to communicate real‑time risk postures
• Generate monthly and quarterly summaries to senior executives and board members
• Translate technical assessments into language accessible to non‑technical stakeholders
• Track KPIs like time‑to‑detect (TTD) and mean‑time‑to‑recover (MTTR) for process optimization

Required Skills

Core Competencies

• Deep knowledge of modern cyber threats, exploits, malware behaviors, and zero‑day vulnerabilities
• Proficiency with endpoint protection systems, data loss prevention (DLP), and EDR solutions
• Familiarity with network security monitoring tools such as Zeek, Suricata, and Snort
• Hands‑on experience with multifactor authentication (MFA), SSO, and public key infrastructure (PKI)

Technical Expertise

• Advanced scripting in Python, Bash, or PowerShell for automation and integration
• API integration for data collection, log correlation, and alerting mechanisms
• Competence with GRC platforms and risk assessment tools such as RSA Archer or LogicManager

Framework & Compliance Knowledge

• Thorough understanding of COBIT, NIST Cybersecurity Framework, and ITIL best practices
• Experience supporting SOC 1/2/3 audit cycles, HIPAA assessments, and vendor risk audits
• Knowledge of third‑party risk management practices and supply chain cybersecurity protocols

Education & Certifications

Academic Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline
• A Master’s degree in a relevant field is a plus but not required

Preferred Certifications

• Accredited Information Systems Security Professional (CISSP)
• Accredited Information Security Manager (CISM)
• Credentialed Risk and Information Systems Strategist (CRISS)
• Accredited Ethical Hacker (CEH)
• CompTIA Security+, CySA+ or equivalent

Tools & Technology Stack

Cloud Ecosystems

• AWS (IAM, GuardDuty, CloudTrail, Inspector)
• Azure Security Center, Azure AD
• Google Chronicle, GCP Cloud Armor

Monitoring & Response

• Splunk, Elastic Stack (ELK), Rapid7 InsightIDR
• Palo Alto Networks Cortex XSOAR
• CrowdStrike Falcon, SentinelOne

Data Visualization & Reporting

• Power BI, Tableau, Grafana
• SQL and data warehousing tools for trend forecasting

Automation & DevSecOps

• Jenkins, GitLab CI/CD, Terraform, Ansible
• Docker, Kubernetes with integrated security scanning tools

Company Metrics Achievements

• 98.9% containment rate for critical incidents within six hours
• 120% expansion of our security intelligence coverage in just 18 months
• Zero major data breaches have been reported in the last three consecutive years
• 34% improvement in threat detection accuracy through automation and AI adoption
• Over 10 million assets are scanned monthly for real‑time risk analysis

Why Join Us

Career Development

• Defined career path toward roles such as Cybersecurity Architect, GRC Lead, or SOC Manager
• Annual training budget for certifications, conferences, and professional development
• Internal mentorship programs and leadership tracks for security professionals

Lifestyle Benefits

• Remote‑first company with flexible work hours
• Paid parental leave, mental health days, and home office stipends
• Access to exclusive threat intelligence databases and zero‑trust technology labs

Eligibility Criteria

Location

• Open to candidates globally with reliable, high-speed internet
• Must be able to operate securely from a home‑based environment

Communication

• Proficiency in English with strong technical writing and verbal presentation skills

Time Zone Flexibility

• Willingness to accommodate international collaboration meetings and ad‑hoc incident escalations