Security Risk Manager

2 weeks ago

Ahmedabad, Gujarat, India BIG IT JOBS Full time

About Company :

The company, publicly traded on the NYSE, reports annual revenues of approximately $450 million and holds a market capitalization near $3.5 billion. As a member of the S&P 600 Cosmetics Index since 2004, it has steadily expanded its brand portfolio. Today, it offers a diverse range of cosmetics, including Well People, a clean beauty label, and Keys Soulcare, a lifestyle beauty brand developed in collaboration with Alicia Keys. Its products are widely available online and at major U.S. retailers, with a steadily growing international presence.

Position Summary :

We are seeking a highly skilled and proactive Security Risk Manager to join our growing security team. You will be responsible for assessing, monitoring, and mitigating information security risks associated with third-party vendors and service providers. This role ensures vendor relationships comply with organizational security policies, industry regulations, and best practices to protect sensitive data and systems.

Key Responsibilities :

- Conduct comprehensive security risk assessments internally and of third-party vendors, including cloud providers, SaaS vendors, and IT service providers.

- Evaluate internal and third-party security controls, policies, and compliance with frameworks such as NIST, ISO 27001, SOC 2, GDPR, HIPAA, and PCI-DSS.

- Perform due diligence reviews, including security questionnaires, audits, and contract reviews.

- Identify, document, and prioritize risks related to vendor access, data handling, and system integrations.

- Work with procurement and legal teams to ensure security requirements are included in vendor contracts and SLAs.

- Prepare risk reports for senior leadership, highlighting key vendor risks and mitigation strategies.

- Communicate security expectations to vendors and internal stakeholders.

- Maintain a centralized vendor risk repository with up-to-date documentation.

- Stay updated on emerging threats, regulatory changes, and industry best practices.

- Enhance vendor risk assessment processes and tools for efficiency and effectiveness.

- Cross-train team members on risk management principles.

- Actively participate in the broader corporate security efforts, including infrastructure security, end-user training, and vulnerability management

Required Qualifications :

- Bachelors degree in Information Security, Cybersecurity, Risk Management, or related field.

- 5+ years of experience in IT risk management, vendor risk assessment, or third-party security evaluations.

- Strong knowledge of security frameworks (NIST, ISO 27001, SOC 2, GDPR, etc.).

- Experience with vendor risk assessment tools

- Strong GRC (Governance, Risk, and Compliance) platform knowledge.

- Familiarity with cloud security, data privacy laws, and contractual security clauses.

- Strong communication and interpersonal skills, with the ability to collaborate effectively with technical and non-technical stakeholders.

Preferred Qualifications :

- Industry certifications such as CISA, CRISC, CTPRP

- Experience in regulated industries (finance, healthcare, government).

- Knowledge of supply chain security risks and zero-trust architecture principles

- Experience with contract reviews to ensure security clauses (data protection, breach notification, audit rights).

- Knowledge of continuous monitoring strategies for vendors.

(ref:hirist.tech)

  • Security Expert

    4 days ago

    Ahmedabad, Gujarat, India beBeeGeoPolitical Full time ₹ 15,00,000 - ₹ 20,00,000

    Job Title: Junior Geo-Political Risk AnalystMax Security is a Global Risk Management organization operating in 160 countries across the globe.We have capabilities in every continent and carry the experience of 25+ successful years in the intelligence, operations, and consulting sector.Position:We are looking for 0–1-year experienced individuals to work as...

  • Third-Party Risk Management Lead

    23 hours ago

    Ahmedabad, Gujarat, India beBeeCybersecurity Full time ₹ 15,00,000 - ₹ 25,00,000

    We're seeking a seasoned professional to lead our third-party risk management program within our Information Security team. Reporting directly to the CISO's office, this Senior Manager will spearhead initiatives and shape our risk landscape.Key Responsibilities:Design and implement a robust third-party risk management frameworkDevelop risk appetite...

  • Urgent) Security Lead

    2 weeks ago

    Ahmedabad, Gujarat, India Eventus Security Full time

    Job DescriptionJob Title: Security Lead (SOC)Location: AhmedabadExperience: 5+ yrsResponsibility Areas Security Lead (L3) SOCSecurity Incident LeadershipLead high-priority security investigations and incident response activities, ensuring accurate analysis, containment, remediation, and post-incident reporting.Operational OversightOversee day-to-day SOC...

  • Global Security Expert

    1 day ago

    Ahmedabad, Gujarat, India beBeeGeopolitical Full time ₹ 15,00,000 - ₹ 20,00,000

    Geopolitical Risk Analyst Position OverviewWe are seeking an experienced and detail-oriented Geopolitical Risk Analyst to join our team in Mumbai. The ideal candidate will have a Master's degree in Political Science, Security Studies, Journalism, International Relations, or Area Studies.The selected candidate will be responsible for gathering relevant...

  • Global Travel Risk Coordinator

    2 weeks ago

    Ahmedabad, Gujarat, India beBeeTravel Full time ₹ 1,20,00,000 - ₹ 2,40,00,000

    Max Security is a global risk management organization with extensive experience in intelligence, operations and consulting sectors.We provide Fortune 500 organizations with tools to conduct business in challenging environments.The GSOC - Travel Security Specialist will coordinate international travel security and risk mitigation projects identifying risks...

  • Risk Management Officer

    3 days ago

    Ahmedabad, Gujarat, India beBeeRiskManagement Full time ₹ 6,00,000 - ₹ 12,00,000

    Job Title: Risk Management OfficerAbout the Role:The Risk Management Officer will be responsible for identifying and mitigating potential risks within our business operations. This role requires a strong analytical mindset, attention to detail, and excellent communication skills.Key Responsibilities:Risk Assessment: Conduct thorough risk assessments to...

  • Risk Management lead

    4 weeks ago

    Ahmedabad, Gujarat, India Adani Defence and Aerospace Full time

    Purpose We are looking for a skilled Risk Management professional to enhance our operational resilience. This role is responsible for identifying risks, maintaining the risk register, evaluating the effectiveness of mitigation plans, and ensuring compliance with regulatory requirements. It also involves conducting detailed assessments, developing contingency...

  • Risk Management lead

    2 weeks ago

    Ahmedabad, Gujarat, India Adani Defence and Aerospace Full time

    Purpose We are looking for a skilled Risk Management professional to enhance our operational resilience. This role is responsible for identifying risks, maintaining the risk register, evaluating the effectiveness of mitigation plans, and ensuring compliance with regulatory requirements. It also involves conducting detailed assessments, developing...

  • Chief Cloud Security Architect

    1 day ago

    Ahmedabad, Gujarat, India beBeeSecurity Full time ₹ 15,00,000 - ₹ 20,10,000

    Job Summary:We are seeking a seasoned professional to fill the position of Oracle Cloud Security and Risk Management Consultant.This role requires expertise in designing, implementing, and managing robust security frameworks and risk controls across Oracle Cloud platforms.The ideal candidate will have 5–7 years of hands-on experience in Oracle Fusion...

  • Security Engineer

    4 weeks ago

    Ahmedabad, Gujarat, India TPI Global Solutions Full time

    JOB TITILE: Security Engineer Level 2 – GRC Tech SolutionsLOCATION: 100 % RemoteJOB TYPE: ContractCONTRACT LENGTH: 6 monthsTIME: 8:30 PM to 5:30 AM ISTResponsibilities:We're looking for a "Security Engineer" with a tech-first mindset that can help grow and enhance client's Cybersecurity and Privacy Organization. As an Engineer supporting the Governance,...