Security Risk Analyst
GurugramFull-timeHybrid6–11 yrs4 L a yearPosted 1 week ago
Senior cybersecurity role at McCormick in Gurugram. Needs 6+ years and a B.Tech, B.E. or B.Sc. Hybrid; pays ₹4 LPA.
About the role
The Security Risk Analyst is a key member of the Cybersecurity Governance, Risk, and Compliance team and will report to the Senior Manager, Cybersecurity Governance, Risk & Compliance. This position will be responsible for assessing security risk, establishing security standards, and ensuring compliance against those standards across all disciplines of the information security domain that support McCormick’s global brands and subsidiaries.
What you'll do
- Intake and analysis of identified risks from a variety of sources including audits, compliance checks, automated vulnerability systems
- Process risk acceptance requests and provide necessary information and analysis to allow business leaders to determine which risks are appropriate
- Complete analyses and reports and work with the Senior Manager, Cybersecurity GRC to develop a comprehensive view of risk across the company
- Review and track action plans developed by risk owners and ensure plans are completed appropriately
- Process policy exception requests as needed or ad-hoc risk analysis as assigned as well as execute a detailed audit plan and identify risk areas, develop action plans
What you need
- Internal controls
- Risk management
- SOX
- Compliance