Information Security Analyst (Government, Risk & Compliance)

Description

• Conduct cybersecurity risk assessments and document findings, risk ratings, and recommendations

• Lead third-party risk assessments for vendors, suppliers, and technology partners

• Interpret regulatory, contractual, and framework requirements and apply them to business use cases

• Support external audits, certifications, and client-facing security assessments

• Advise stakeholders on mitigation strategies and track remediation progress

• Analyze the security risk of new or existing computer applications, software or services

• Deliver cybersecurity awareness training and simulated phishing activities developed by CAS

• Lead CAS Objectives and Key Results (OKRs), initiatives, and projects with low to moderate operational impact to the business

• Participate in the CAS Weekly Champion rotation and enhance Champion duties defined in the CAS Weekly Champion playbook

• All other duties as assigned

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, or related field (or equivalent experience)

• Demonstrated experience independently performing cybersecurity risk, compliance, or assurance activities

• Experience engaging directly with business stakeholders or third parties on cybersecurity matters

• Ability to translate security and compliance requirements into business-relevant guidance

• Strong written and verbal communication skills

• Applied experience with frameworks such as NIST, ISO 27001, SOC 2, or similar

• Preferred professional cybersecurity certification (e.g., Security , CISA, CRISC, CISSP)

• This job posting will remain open a minimum of 72 hours and on an ongoing basis until filled.

• Job Information Technology

• Primary Location India-Karnataka-Bengaluru

• Schedule: Full-time

• Travel: No

• Req ID: 261175

• Job Hire Type Experienced Not Applicable #BMI N/A