Cyber Risk Analyst

About the role

We are looking for a Cyber Risk Analyst to strengthen our governance, risk, and compliance posture across the organization. In this role, the Cyber Risk Analyst will drive cyber security audits, vendor security reviews, business continuity (BCP/DR) drills, and security awareness initiatives, while supporting the implementation of frameworks such as NIST Cybersecurity Framework (CSF) and ISO 27001 ISMS.

What you'll do

• Plan and execute internal cyber security audits and control reviews across applications, infrastructure, and business processes
• Identify and track vendor risks, recommend mitigation measures, and support contractual security requirements where needed
• Work with stakeholders to maintain and test business continuity and disaster recovery (BCP/DR) plans
• Plan, coordinate, and document tabletop exercises and technical BCP/DR drills, track and follow up on corrective actions
• Maintain up‑to‑date security policies, standards, procedures, and guidelines, ensuring alignment with NIST CSF, ISO 27001, and relevant regulations

What you need

• 3–6 yrs of experience
• ISO 27001
• Compliance
• Data privacy
• Risk management
• Due diligence
• Learning and development
• B.Tech or B.E.

Good to have

• CISA