Security Analyst
- Crisil
- 1 - 4 years
- Mumbai
- 2 months ago
- Email to a friend
- Report this job
Job Description
- Conduct comprehensive risk assessments of third-party vendors, including evaluating their information security practices, operational capabilities, and compliance with legal and regulatory requirements
- Perform due diligence on prospective and existing vendors, ensuring they meet the organization's standards for security, privacy, and business continuity.
- Continuously monitor third-party risk exposure and create regular reports on the risk status of vendors. Identify and escalate potential issues to management.
- Review and manage vendor contracts, ensuring that appropriate risk management clauses and service-level agreements (SLAs) are in place.
- Collaborate with internal stakeholders and vendors to develop and implement risk mitigation strategies. Recommend corrective actions or improvement plans for third-party vendors with identified risks
- Assist in the development and maintenance of third-party risk management policies, procedures, and frameworks in alignment with industry best practices and regulatory requirements.
- Work closely with internal teams (e.g., Legal, Procurement, Compliance, IT Security) to ensure a unified approach to third-party risk management
- Ensure compliance with relevant regulations, standards, and guidelines (e.g., GDPR, ISO 27001, NIST, PCI-DSS) related to third-party risk management.
- Conduct periodic vendor audits to verify compliance with contractual obligations and organizational policies
- Assist in the investigation and resolution of third-party risk incidents, including data breaches or service disruptions.
Job Classification
Industry: Financial ServicesFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security AuditorEmployement Type: Full timeContact Details:
Company: CrisilLocation(s): Mumbai
Keyskills: it risk management it security risk management security analysis iso cyber security owasp soc ceh information security siem vulnerability assessment nist gdpr nessus security certified ethical hacker vapt penetration testing pci dss ethical hacking incident
Similar positions
Crisil
CRISIL CRISIL is a an agile and innovative, global analytics company driven by its mission of making markets function better. We are India's foremost provider of ratings, data, research, analytics and solutions. A strong track record of growth, culture of innovation and global footprint sets us ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in