Lead Information Security Analyst

As a Security Risk Analyst with 5-7 years of experience, you will play a critical role in identifying, assessing, and mitigating information security risks to ensure compliance with organizational policies and regulatory requirements. Key Responsibilities: - Conduct thorough risk assessments and threat analysis on IT systems, applications, and infrastructure. - Identify vulnerabilities and provide recommendations for mitigation strategies. - Monitor security posture and ensure adherence to risk management frameworks such as ISO 27001, NIST, etc. - Collaborate with IT and business teams to address security gaps effectively. - Develop and maintain detailed risk registers and reports. - Support audits, compliance initiatives, and regulatory requirements. - Perform third-party/vendor risk assessments to enhance overall security posture. - Assist in incident response activities and conduct root cause analysis. - Stay updated with emerging security threats and industry best practices to proactively address potential risks. Qualifications Required: - Bachelors degree in Computer Science, Information Security, or a related field. - 5-7 years of experience in cybersecurity, risk assessment, or IT security. - Strong understanding of risk management frameworks such as ISO 27001, NIST, and COBIT. - Proficiency in vulnerability assessment tools and techniques. - Familiarity with security tools like SIEM, DLP, and endpoint protection. - Knowledge of regulatory requirements such as GDPR, HIPAA, etc., as applicable. - Excellent analytical, problem-solving, and communication skills. - Ability to work both independently and collaboratively in cross-functional teams. In this role, you will have the opportunity to continuously learn and grow while leveraging your expertise in risk analysis and mitigation, attention to detail, effective communication and reporting, and stakeholder management. As a Security Risk Analyst with 5-7 years of experience, you will play a critical role in identifying, assessing, and mitigating information security risks to ensure compliance with organizational policies and regulatory requirements. Key Responsibilities: - Conduct thorough risk assessments and threat analysis on IT systems, applications, and infrastructure. - Identify vulnerabilities and provide recommendations for mitigation strategies. - Monitor security posture and ensure adherence to risk management frameworks such as ISO 27001, NIST, etc. - Collaborate with IT and business teams to address security gaps effectively. - Develop and maintain detailed risk registers and reports. - Support audits, compliance initiatives, and regulatory requirements. - Perform third-party/vendor risk assessments to enhance overall security posture. - Assist in incident response activities and conduct root cause analysis. - Stay updated with emerging security threats and industry best practices to proactively address potential risks. Qualifications Required: - Bachelors degree in Computer Science, Information Security, or a related field. - 5-7 years of experience in cybersecurity, risk assessment, or IT security. - Strong understanding of risk management frameworks such as ISO 27001, NIST, and COBIT. - Proficiency in vulnerability assessment tools and techniques. - Familiarity with security tools like SIEM, DLP, and endpoint protection. - Knowledge of regulatory requirements such as GDPR, HIPAA, etc., as applicable. - Excellent analytical, problem-solving, and communication skills. - Ability to work both independently and collaboratively in cross-functional teams. In this role, you will have the opportunity to continuously learn and grow while leveraging your expertise in risk analysis and mitigation, attention to detail, effective communication and reporting, and stakeholder management.