Third Party Cyber Risk Analyst - Officer

Responsibilities

• Perform thorough cyber and information security assessments of third-party service providers using established risk management frameworks.
• Review and analyze third-party attestation and certification artifacts, including SOC2, SIG, NIST, and ISO 27001/2, to identify potential security risks.
• Document assessment results in alignment with enterprise risk management and issue management standards.
• Provide subject matter expertise and timely recommendations to address identified information security problems.

Requirements

• 10 years of experience in Cyber/Information Security, Third Party Risk Assessment, or Cyber Security Assessments.
• Deep knowledge of security and risk management frameworks and regulations, including ISO 27001/27002, NIST, GDPR, and DORA.
• Expertise in writing technical and risk management reports.
• Superior attention to detail with excellent written and verbal communication skills.
• Ability to work strictly onsite in Bangalore, India.

Preferred Qualifications

• Bachelor's or Master's degree in Cybersecurity, Law, Privacy, or Risk Management.
• Professional certifications such as CISA, CISM, CISSP, or Security+.
• Demonstrated critical thinking and analytical skills with the ability to communicate complex security issues to both technical and non-technical audiences.

About the Company

State Street is a leading global provider of financial services to institutional investors. We help our clients manage risk, respond to challenges, and drive performance. We are committed to fostering an inclusive environment where every employee is empowered to reach their full potential.