Third Party Cyber Risk Services Operations - Lead Analyst

🔹 Role: Third Party Cyber Risk Services Operations – Lead Analyst 📍 Location: Bellandur, Bangalore 🕐 Work Timings: 01:30 PM – 10:30 PM 🕐 Type: Contract to hire 🏢 Work Mode: Monday (WFH), Tuesday–Friday (WFO) 📅 Experience: 10–12 Years  Job Summary:Role SummaryThe Lead Analyst will support Third-Party Cyber Risk Services operations by managing daily intake, executing workflows, and delivering data-driven risk assessments. This role is responsible for making defensible third-party risk decisions (including accept/reject), partnering with cross-functional stakeholders, and strengthening organizational cyber resilience. Key ResponsibilitiesThird-Party Risk ManagementManage and maintain the third-party risk management framework Perform inherent and residual risk assessments using data-driven methodologies Identify cyber risks associated with third-party vendors Risk Analysis & MitigationDefine, implement, and track mitigation and risk treatment plans Analyse trade-offs to manage residual risk effectively Support defensible risk decisions aligned with business objectives Stakeholder CollaborationPartner with: Procurement (contract advisors, category managers) Legal teams Business/Product owners Risk managers & analysts Security engineers & threat intelligence teams Communicate risk insights, impacts, and recommendations clearly Operations & DeliveryManage intake and prioritize work based on risk Meet SLAs without compromising quality Handle escalations and resolve high-risk issues promptly Process Improvement & AutomationDefine and enhance processes, procedures, and tools Identify efficiency opportunities and leverage automation/AI Drive continuous improvement initiatives Metrics & ReportingDevelop and analyse risk metrics and dashboards Track trends, risk posture, and control effectiveness Required QualificationsCore ExpertiseStrong experience in Third-Party Risk Management (TPRM) Knowledge of information security concepts: threat, vulnerability, impact Ability to apply risk concepts to policies, standards, and controls Framework KnowledgeHands-on experience with NIST Cybersecurity Framework (CSF) Understanding of control effectiveness and compliance assurance Analytical & Problem-Solving SkillsStrong critical thinking and risk analysis capability Ability to break down complex problems and work in ambiguous environments Experience in designing and maturing processes Communication & LeadershipExcellent written and verbal communication skills Ability to influence stakeholders across levels Strong cross-functional collaboration skills Agile & Execution SkillsExperience working in agile environments Ability to prioritize tasks, remove blockers, and adapt quickly Key CompetenciesRisk Assessment & Decision-Making Cybersecurity & Compliance Stakeholder Management Process Optimization Data-Driven Insights Automation & Innovation