Cyber Security Risk Analyst (Remote - India) at Jobgether

We are redirecting you to the source. If you are not redirected in 3 seconds, please click here.

Cyber Security Risk Analyst (Remote - India) at Jobgether. This position is posted by Jobgether on behalf of a partner company. We are currently looking for a . Cyber Security Risk Analyst. in . India. .. This role offers an exciting opportunity to take ownership of the full risk assessment lifecycle, ensuring technical security controls are effective across cloud and on-premise environments. You will lead detailed security audits, evaluate risks, and partner with engineering and product teams to remediate vulnerabilities. The position combines a strong risk and compliance mindset with technical expertise in modern enterprise security tooling. You will contribute to designing secure software practices, performing third-party assessments, and supporting AI governance initiatives. The role is ideal for someone passionate about cybersecurity, compliance frameworks, and improving organizational security posture.. . Accountabilities. Lead technology and cyber risk assessments, maintaining a detailed risk register with impact and likelihood rationales.. Conduct security audits and evaluate IT controls across cloud, on-prem, and hybrid environments.. Map controls to frameworks (ISO/IEC 27001:2022/27002, NIST CSF 2.0, NIST 800‑53, CIS Controls, PCI DSS 4.0) and regulatory requirements (GovRAMP, EU AI Act, GDPR, CCPA).. Plan and execute end-to-end technical audits including evidence gathering, walkthroughs, testing, and issue rating.. Support the design and testing of Access Control, Application and Data Security, IT Service Operations, and Technology Architecture.. Partner with engineering, IT, and product teams to translate requirements into pragmatic controls and remediation actions.. Perform third-party risk assessments and contribute to AI governance and data protection audits.. Develop playbooks, control testing procedures, and knowledge articles to raise organizational control maturity.. Proven experience in cybersecurity, with demonstrable expertise in risk assessment and security auditing.. Relevant certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent experience.. Strong knowledge of ISO 27001/27002, NIST CSF, NIST 800‑53, CIS Controls, SOC 2, and PCI DSS.. Hands-on experience assessing Microsoft and Azure security including Entra ID, Defender suite, Sentinel, Intune, Azure Policy, and Purview.. Experience with Identity and Access Management, Cloud Security (Azure, AWS), Data Protection, SecOps, Agile Software Development (DevSecOps), and Security by Design.. Technical literacy across networks, identity, cloud, endpoints, logging/monitoring, and secure configuration.. Solid understanding of ITGCs, evidence-based testing methods, and audit documentation/reporting.. Competence in using GenAI or Agentic AI to enhance GRC processes.. Strong communication and interpersonal skills to work effectively with stakeholders across locations and functions.. . Company Location: India.