Third Party Security Risk Analyst

You should have 2 to 5 years of experience in information security, IT auditing, and IT/Third Party risk management processes. This position is based in Chennai. Your main responsibilities will include reviewing and establishing secure processes and systems at Third Party's end, conducting Third Party risk assessments using ISO27001 or COBIT framework, classifying Third Parties from an information security risk perspective, preparing risk-based questionnaires and reports, evaluating Third Parties from an information security perspective, and providing recommendations to mitigate risks and include risk-based clauses in agreements with Third Parties. Preferred certifications for this role include ISO27001 LA, CISSP, CISA, CTPRA, or CTPRA. To excel in this role, you should possess excellent written and verbal communication skills, be an independent self-starter, have knowledge in various information security technologies, exposure to Third Party Risk questionnaires and tools like Standard Information Gathering (SIG), experience in securing information for technical solutions, knowledge of IT risk management, common assessment control techniques, analytic techniques, Excel, security controls, system security, network security, information security, ISMS Management, COBIT, Technology risk and compliance, BCP & DR planning, IT and IS audits, BCP audits, Security operations assessment, Cloud security, and ability to work with senior stakeholders. Additionally, you should have experience in PCI DSS, PA DSS, ISO27001, and COBIT, as well as a strong ability to devise, drive, and implement standard processes and best practices for all suppliers, from both security and risk perspectives.,