Lead Cybersecurity Risk Analyst

Location: Bengaluru (Work from Office)
Employment Type: 6 Months Contract (Contract-to-Hire)
Work Schedule: Monday - Work from Home | Tuesday to Friday - Work from Office
Shift: 01:30 PM – 10:30 PM IST

About the Role

We are looking for an experienced Lead Cybersecurity Risk Analyst to join a global technology team responsible for strengthening cybersecurity and IT risk management across enterprise applications and platforms. This role focuses on identifying, assessing, and managing cyber risks while working closely with architects, engineering teams, and business stakeholders to embed security into technology solutions from the design stage.

This is a senior individual contributor role that requires strong expertise in cybersecurity risk management, security governance, architecture reviews, and stakeholder engagement within large enterprise environments.

Key Responsibilities

• Lead cyber and IT risk assessments for enterprise applications, platforms, and technology initiatives.
• Review solution architectures, data flows, deployment models, and third-party integrations to identify security risks.
• Partner with architects, engineering teams, and product owners to incorporate secure-by-design principles into technology solutions.
• Perform architecture and security reviews and recommend practical risk mitigation strategies.
• Support security incidents, risk exceptions, remediation planning, and action tracking.
• Serve as the primary cybersecurity risk advisor for assigned business or technology portfolios.
• Collaborate with technical and business stakeholders to communicate risks and drive informed decision-making.
• Develop and maintain cybersecurity risk dashboards, metrics, reports, and governance documentation.
• Conduct cybersecurity awareness sessions and guide teams on risk management best practices.
• Mentor junior analysts and promote consistent risk assessment methodologies across the organization.
• Drive continuous improvement of cybersecurity governance, risk management processes, and security assurance activities.

Required Skills

• Cybersecurity Risk Management
• IT Risk Assessment
• Information Security
• Security Architecture Reviews
• Risk Analysis & Remediation
• Secure-by-Design Principles
• Security Governance
• Enterprise Risk Management
• Security Incident Support
• Risk Exception Management
• Stakeholder Management
• Risk Metrics & Reporting
• Cybersecurity Awareness
• Risk Framework Implementation

Required Experience

• 14–18 years of experience in Cybersecurity, Information Security, or IT Risk Management.
• Strong experience conducting enterprise cybersecurity risk assessments and security reviews.
• Experience evaluating application architectures, cloud environments, and enterprise technology platforms.
• Hands-on experience managing risk remediation, tracking mitigation activities, and supporting security governance.
• Experience working within large, complex enterprise IT environments.
• Proven ability to influence technical and business stakeholders without direct authority.
• Experience mentoring or guiding cybersecurity or risk management professionals.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISSP, CISA, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are preferred.
• Strong understanding of industry-standard security and risk frameworks including ISO 27001, NIST Cybersecurity Framework, and CIS Controls.