Senior Information Security Risk Analyst Equiniti

5.0 - 9.0 years

0 Lacs

karnataka

On-site

As a Senior Information Security Risk Analyst, you will lead and conduct comprehensive security risk assessments across EQ's internal systems, infrastructure, cloud platforms, third-party services, applications, mobile environments, and networks. Your role will be pivotal in identifying and evaluating potential cybersecurity threats and vulnerabilities, ensuring robust risk mitigation strategies are in place to protect EQ's data and systems. You will work cross-functionally with stakeholders to embed security best practices and ensure alignment with regulatory and organizational standards. You will review cloud architecture, deployment models, and services to identify gaps against industry best practices (e.g., CIS Benchmarks, NIST, ISO 27001) and collaborate with DevOps and Cloud Engineering teams to advise on security controls and risk mitigation strategies in AWS, Azure. Additionally, you will lead the analysis and interpretation of security data from diverse sources, including technical assessments, penetration test reports, and code reviews, to identify systemic vulnerabilities, inform strategic risk decisions, and guide enterprise-level remediation efforts. Your responsibilities will also include driving the development and strategic recommendation of risk mitigation initiatives, translating assessment findings into actionable improvements to security policies, enterprise controls, and technical architectures. You will maintain Risk records and Risk Acceptances regarding IT, Information, or Cyber Security in the Company's Risk Register/GRC tool. Furthermore, you will lead the interpretation and strategic integration of evolving cybersecurity regulations and standards (e.g., GDPR, NIST, ISO 27001, SOX, AI Act, DORA) in collaboration with Legal and Compliance to ensure enterprise-wide alignment and risk-informed decision-making. You will conduct enterprise-level compliance assessments and cybersecurity gap analyses to evaluate EQ's adherence to relevant regulations and frameworks, embedding these requirements into the broader Risk Management lifecycle to ensure systematic enforcement across all new and evolving IT systems and applications. In addition, you will conduct Risk Analysis of existing and new third-parties playing a significant role in the Company's supply chain and with access to Company or customer data or the Company's systems. You will track any significant risk issues arising to completion over agreed timescales. Your role will also involve overseeing the aggregation and analysis of enterprise-wide risk data to identify emerging threats and delivering strategic, data-driven insights and reports to Executive and senior leadership teams. You will engage with various developers and stakeholders across the business in selecting tailored security training on the training platform and participate in knowledge sharing sessions on emerging threats and security risk trends. Moreover, you will lead the evolution and governance of the enterprise Security Risk Management Framework, collaborating across IT and security teams to embed effective technical controls (e.g., firewalls, encryption, MFA) and ensure policies, standards, and procedures align with best practice and regulatory requirements. You will also advise and enable secure software development by defining secure coding standards, guiding development teams, and integrating application security testing tools into the SDLC.,

Posted 1 week ago

Apply

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.