TL;DR

Senior Information Security Risk Analyst: Lead and manage cybersecurity governance, risk, and compliance functions ensuring alignment with regulatory frameworks and business objectives. Focus on risk assessments, vulnerability management, third-party risk, and security awareness programs in a hybrid setup based in Hyderabad.

Location: Hybrid, Hyderabad, India

Company

%hirify_global% is a product company operating in fintech and proptech domains, focusing on international property payments.

What you will do

Own and maintain the Information Security Management System (ISMS) and related policies.
Lead cybersecurity risk assessments and maintain the Risk Register with mitigation tracking.
Coordinate external audits and certification efforts (e.g., SOC 2, ISO 27001).
Oversee vulnerability management and ensure regulatory compliance.
Manage third-party risk programs and security awareness training.
Provide second-line oversight and advisory to technical teams and governance bodies.

Requirements

Location: Must be based in Hyderabad or able to work hybrid from there.
5+ years in cybersecurity with 2+ years in governance, risk, or compliance roles.
Experience with regulatory environments such as DORA, GDPR, NIS2, FCA.
Strong knowledge of security frameworks like ISO/IEC 27001, NIST CSF, SOC 2.
Excellent risk analysis and stakeholder communication skills.
Ability to work independently and manage complex environments.

Nice to have

Certifications such as ISO 27001 Lead Implementer, CRISC, CISM, CISA, CISSP, or CDPSE.

Culture & Benefits

Equal opportunity employer welcoming diverse backgrounds.
Collaborative and passionate work environment.
Focus on building innovative solutions in proptech and fintech.