Cyber and 3rd party risk manager

3 weeks ago

Hyderabad, Telangana, India Amgen Inc Full time
Job Description

- This is a lead role to support the risk management product team in identifying, analyzing, and mitigating IT-related risks to the organization. This role will involve working closely with various departments to ensure that risk controls are in place, policies are adhered to, and security standards are met. The IT Risk Analyst will assist in developing and maintaining risk management frameworks, performing assessments, and supporting regulatory compliance efforts.

Risk Management Leadership

- Support the global risk management and third-party organization in leading a team of risk analysts performing tasks related to the global risk assessment processes.

Risk Identification and Assessment:

- Conduct risk assessments to identify vulnerabilities in IT systems, processes, and policies.
- Assist in the identification and evaluation of risks associated with third-party vendors and partners.
- Maintain the IT risk register, documenting risks, issues, and remediation actions.

Risk Mitigation and Monitoring:

- Recommend risk mitigation strategies and implement risk management controls across IT infrastructure.
- Collaborate with IT, cybersecurity, and business teams to track and resolve identified risks and vulnerabilities.
- Monitor and report on the effectiveness of existing IT risk controls and recommend enhancements as needed.

Compliance and Regulatory Support:

- Ensure compliance with relevant industry standards and regulatory requirements (e.g., GDPR, SOX, PCI-DSS, NIST).
- Assist in the preparation for audits by internal and external parties, providing documentation and evidence of IT risk management practices.
- Support the development and implementation of IT governance, risk, and compliance frameworks.

Vendor Risk Management:

- Conduct vendor risk assessments, ensuring third-party services and products align with internal risk and security policies.
- Regularly review vendor performance and risk exposure, working with procurement and legal teams as necessary.

Basic Qualifications and Experience

- Bachelor's degree in information technology, Cybersecurity, Risk Management, or a related field.
- Certifications such as CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), or CISSP (Certified Information Systems Security Professional) are highly desirable.

Experience

- 4-6 years of experience in IT risk management, IT auditing, or information security.
- Hands-on experience with risk management tools and frameworks (e.g., ISO 27001, NIST, COBIT).

Skills and Competencies:

- Strong understanding of IT infrastructure, systems, and security best practices.
- Ability to assess technical and business risk related to information systems.
- Excellent problem-solving, analytical, and communication skills.
- Ability to communicate complex risk concepts to non-technical stakeholders.
- Ability to assess and interpret security-related clauses in third-party contracts, such as Security Requirements Schedules (SRS)
- Familiarity with regulatory frameworks and compliance standards (e.g., GDPR, HIPAA, SOX, PCI-DSS).

Technical Knowledge:

- Proficiency with risk management tools, GRC (Governance, Risk, and Compliance) software, and security incident management tools.
- Experience with security controls related to networks, databases, and cloud environments

  • Cyber and 3rd party risk manager

    3 weeks ago

    Hyderabad, Telangana, India Amgen Inc Full time

    Job DescriptionDescriptionThe Cyber and 3rd Party Risk Manager will be responsible for identifying, assessing, and mitigating cyber risks associated with third-party vendors, ensuring compliance with security policies and regulations.Responsibilities- Identify, assess, and manage cyber risks associated with third-party vendors.- Develop and implement risk...

  • Exertal Party Risk Management

    3 weeks ago

    Hyderabad, Telangana, India Sandoz Full time

    Job DescriptionKey Responsibilities:- Support Novartis systems to verify compliance with HSE relevant responsible procurement commitments- Executes risk assessments of selected business critical 3rd party suppliers- Contributes to the overall 3rd party supplier improvement program- Follows the EPRM processes, standards, and ensures tracking of findings to...

  • Third party risk

    4 weeks ago

    Hyderabad, Telangana, India MOURI Tech Full time

    TPRM Analyst 4 to 8 Years Role Summary: Cyber Risk Analyst to support and strengthen our enterprise cyber risk management program. The ideal candidate will be responsible for conducting risk and criticality assessments, maintaining the risk register, tracking mitigation efforts, and generating actionable risk reports to support leadership decision-making....

  • Third party risk

    3 weeks ago

    Hyderabad, Telangana, India MOURI Tech Full time

    Job DescriptionTPRM Analyst 4 to 8 YearsRole Summary: Cyber Risk Analyst to support and strengthen our enterprise cyber risk management program. The ideal candidate will be responsible for conducting risk and criticality assessments, maintaining the risk register, tracking mitigation efforts, and generating actionable risk reports to support leadership...

  • Senior Vendor Cyber Risk Analyst

    2 weeks ago

    Hyderabad, Telangana, India S&P Global Market Intelligence Full time

    Job DescriptionThe Team:- As part of Vendor Risk Management, the Vendor Cyber Risk Management team manages the Supply Chain Cyber risks by performing risk assessments of third-party engagements to identify and reduce the risks posed by third parties. This is an extremely important role, considering the fact that large number of data breaches happen due to...

  • Senior Cyber Security Analyst

    3 weeks ago

    Hyderabad, Telangana, India Antal International Full time

    As Cyber Security Analyst you will be required to work collaborate with our client IS Cyber Security teams to understand their cyber security systems architecture processes etc and recommend necessary changes implement enhanced Information Security systems either within organisation or at the client systems Roles Responsibilities ...

  • Senior Cyber Security Analyst

    2 weeks ago

    Hyderabad, Telangana, India Antal International Full time

    Job Description As Cyber Security Analyst, you will be required to work & collaborate with our client IS / Cyber Security teams to understand their cyber security systems, architecture, processes, etc., and recommend necessary changes & implement enhanced Information Security systems either within organisation or at the client systems. Roles &...

  • Senior Third-Party Risk Management

    4 days ago

    Hyderabad, Telangana, India New Relic Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    We are a global team of innovators and pioneers dedicated to shaping the future of observability. At New Relic, we build an intelligent platform that empowers companies to thrive in an AI-first world by giving them unparalleled insight into their complex systems. As we continue to expand our global footprint, we're looking for passionate people to join our...

  • Senior Information Security Risk Manager

    2 weeks ago

    Hyderabad, Telangana, India beBeeRisk Full time ₹ 1,50,00,000 - ₹ 2,50,00,000

    Information Security Risk Management LeadThis is a critical mid-senior level role in enhancing the bank's resilience by effectively identifying, assessing, and mitigating information security risks.The ideal candidate will bring sound expertise in information security, robust project management skills, and a proven ability to engage with senior and executive...

  • Cyber Identity Management Professional

    1 week ago

    Hyderabad, Telangana, India beBeeIdentity Full time ₹ 1,50,00,000 - ₹ 2,50,00,000

    Job DescriptionCyber Identity Consultant RoleThis position involves working with teams and clients to develop and implement identity lifecycle management processes using Saviynt.Designing and configuring Saviynt solutions to meet client requirements.Collaborating with stakeholders to gather and analyze business needs.Developing custom connectors and...