Cyber Risk Analyst

As a Cyber Risk Analyst within our organization, you will play a crucial role in strengthening our governance, risk, and compliance posture. Your responsibilities will include: - Conducting Cyber Security Audits & Assessments (30%): - Planning and executing internal cyber security audits and control reviews. - Documenting findings, assessing risk and impact, and tracking remediation through closure with respective teams. - Performing Vendor and Third-party Security Reviews (30%): - Conducting security due diligence for vendors and third parties. - Identifying and tracking vendor risks, recommending mitigation measures, and supporting contractual security requirements as needed. - Managing Business Continuity and BCP/DR drills (25%): - Working with stakeholders to maintain and test business continuity and disaster recovery plans. - Planning, coordinating, and documenting tabletop exercises and technical BCP/DR drills. - Overseeing Cyber Governance and Risk Management (10%): - Maintaining up-to-date security policies, standards, procedures, and guidelines. - Preparing regular reports on audit findings, risk status, BCP drill outcomes, vendor risk posture, and ISMS/NIST CSF progress. - Leading Cyber Security Awareness & Training (5%): - Developing and delivering cyber security awareness sessions and targeted training for employees. - Creating engaging communication materials to improve security culture. Qualifications required for this role include: - Bachelor's degree in any engineering discipline. - At least 3 years of experience in cyber governance, risk, and compliance domain. - Experience in implementing security controls adhering to NIST CSF, ISO 27001 standards. - Exposure to industry standards and regulations such as SOC 2, ISO 27001, GDPR/DPDP etc. - Security certifications such as CISA, ISO 27001 Lead Implementer / Lead Auditor are preferred. In addition to the above responsibilities and qualifications, you will benefit from professional growth in a dynamic industry, a collaborative culture, multicultural experiences, and tailored learning and development programs at Sun King. This job description provides a comprehensive overview of the Cyber Risk Analyst role within our organization. As a Cyber Risk Analyst within our organization, you will play a crucial role in strengthening our governance, risk, and compliance posture. Your responsibilities will include: - Conducting Cyber Security Audits & Assessments (30%): - Planning and executing internal cyber security audits and control reviews. - Documenting findings, assessing risk and impact, and tracking remediation through closure with respective teams. - Performing Vendor and Third-party Security Reviews (30%): - Conducting security due diligence for vendors and third parties. - Identifying and tracking vendor risks, recommending mitigation measures, and supporting contractual security requirements as needed. - Managing Business Continuity and BCP/DR drills (25%): - Working with stakeholders to maintain and test business continuity and disaster recovery plans. - Planning, coordinating, and documenting tabletop exercises and technical BCP/DR drills. - Overseeing Cyber Governance and Risk Management (10%): - Maintaining up-to-date security policies, standards, procedures, and guidelines. - Preparing regular reports on audit findings, risk status, BCP drill outcomes, vendor risk posture, and ISMS/NIST CSF progress. - Leading Cyber Security Awareness & Training (5%): - Developing and delivering cyber security awareness sessions and targeted training for employees. - Creating engaging communication materials to improve security culture. Qualifications required for this role include: - Bachelor's degree in any engineering discipline. - At least 3 years of experience in cyber governance, risk, and compliance domain. - Experience in implementing security controls adhering to NIST CSF, ISO 27001 standards. - Exposure to industry standards and regulations such as SOC 2, ISO 27001, GDPR/DPDP etc. - Security certifications such as CISA, ISO 27001 Lead Implementer / Lead Auditor are preferred. In addition to the above responsibilities and qualifications, you will benefit from professional growth in a dynamic industry, a collaborative culture, multicultural experiences, and tailored learning and development programs at Sun King. This job description provides a comprehensive overview of the Cyber Risk Analyst role within our organization.