Cyber risk Analyst

Exp: 4 to 8 Years

Location: Hyderabad

N.P: Immediate to 30 Days

Role Summary: Cyber Risk Analyst to support and strengthen our enterprise cyber risk management program. The ideal candidate will be responsible for conducting risk and criticality assessments, maintaining the risk register, tracking mitigation efforts, and generating actionable risk reports to support leadership decision-making.

Key Responsibilities:

Conduct cyber risk assessments focusing on identifying and evaluating threats to the organization’s information assets.

Collaborate with stakeholders per assessment to ensure accurate control identification and risk interpretation.

Prepare and deliver comprehensive risk assessment reports with prioritized risks, likelihood, impact levels, and actionable mitigation recommendations.

Monitor progress of risk mitigation plans on a weekly basis and validate timely completion.

Evaluate the effectiveness of mitigation actions and recommend adjustments where necessary.

Submit weekly status updates to the Director of Cyber Security and Manager of Cyber Governance.

Deliver weekly and monthly risk activity status reports.

Create detailed monthly risk dashboards and executive summaries with key metrics, mitigation progress, and trending threats.

Provide actionable insights and KPIs to inform leadership of risk posture and required actions.

Required Skills & Qualifications:

Experience in Cyber Risk Management, Information Security, or GRC.

Strong knowledge of risk assessment methodologies (e.g., NIST SP 800-30, ISO 27005).

Hands-on experience with maintaining and analyzing a Cyber Risk Register.

Excellent communication and reporting skills with the ability to simplify complex risk topics for non-technical stakeholders.

Proficient in MS Excel/PowerPoint for risk reporting and dashboarding.

Familiarity with industry frameworks such as NIST CSF, ISO 27001, or FAIR is a plus