Security Risk Analyst Jobs

Opportunity Overview: We’re looking for a Compliance Analyst to help our team ensure our compliance processes are consistent, scalable, and sustainable as the organization grows. Our team provides centralized ownership and management of the compliance programs by collaborating cross functionally across the organization. You’ll also partner closely with IT and People Operations to ensure the organization operates in accordance with legal, regulatory, and ethical standards. What you’ll do: Support execution of HITRUST, HIPAA, and SOC 2 readiness, certification, and re-certification activities. Assist in remediation of identified deficiencies of gap assessments.. Implement and monitor security controls aligned with HITRUST CSF and related standards. Provide guidance on HITRUST frameworks, MyCSF tool usage, and best practices. Collaborate with IT, security, and compliance teams to ensure smooth certification processes. Prepare and present audit findings and compliance reports to leadership. Support internal training programs to strengthen compliance awareness. Required Qualifications: Education : Bachelor’s degree in Information Security, Risk Management, or related field. Experience : 2 + years in compliance, Access control, ISO or HITRUST-related projects. Preferred Skills Familiarity with GRC tools and cloud security. Knowledge of major compliance frameworks (SOC 2, ISO 27001, GDPR, NIST, HIPAA). Strong analytical, communication, and stakeholder management skills. ISMS roles and responsibilities ( Entry to 5 yrs) Fair understanding of Information Security practices. Align to the organization policies and procedures. Ensure to get updated with ISMS roles as assigned by the department/process heads. Ability to commute/relocate: Hyderabad, Telangana: Reliably commute or planning to relocate before starting work (Preferred) Interview Process*: Connect with Talent Acquisition Meet with the Hiring Manager Behavioral Interview(s) Case Study Interview

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

Job Title Identity Remediation and Onboarding Analyst A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open-source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity. WHAT YOU'LL DO Execute identity remediation initiatives across critical systems, eliminating orphaned accounts, stale access, excessive privileges, and unmanaged service accounts. Perform hands-on cleanup and risk reduction across accounts, entitlements, and privileged access in alignment with firm standards. Drive service security improvements, including remediation of clear-text passwords, credential vaulting and rotation, ownership validation, and enforcement of lifecycle controls. Support onboarding of applications and privileged accounts into the firm’s Identity Governance & Administration (IGA) solution, and Privileged Access Management platforms in alignment to firm’s access control requirements. Reduce administrative access across critical platforms by identifying excessive privileged access and implementing least-privileged controls. Strengthen group and entitlement governance by simplifying complex group structures and aligning them to standardized access models. Partner with application, infrastructure, and engineering teams to implement access changes and close control gaps. Track remediation efforts through completion, maintaining audit-ready documentation and measurable evidence of risk reduction. Monitor shared mailboxes and ticketing queues related to remediation and onboarding activities, ensuring timely response, prioritization, and es

*Due to the nature of the projects and specific client security clearance requirements, this role requires the successful candidate to be a Singapore Citizen or Singapore PR. Woven between all the stages of the delivery process is the work of a Quality Analyst: the technologist who focuses on the complexity and risk inherent in building solutions. By collaborating with each team member—Developer, Business Analyst, Designer, etc.—they ensure quality is thoughtfully examined in both processes and technology. QAs are more than testers; they're team motivators and strive to inspire all teammates to weave quality into their mindsets and code. Job responsibilities Aim to shift quality to the left in alignment with senior client stakeholders. Partner with senior stakeholders to understand the product, create a quality strategy and ensure that the teams are empowered to implement it. Highlight risks to software delivery and assist in managing them alongside the leadership team. Regularly carry out exploratory testing to gain insights and uncover potential risks. Drive improvements for clean code, tests, testability and advice on test tools/frameworks. Define, discuss and implement a program approach to testing across multiple products/services and domains, commonly referred to as “UAT”, “E2E”, etc. Influence a consistent approach in automation of tests across teams in a program, e.g. nomenclature, domain boundaries, contracts between services, distinct layers, common tooling and dashboard representations in the right situation. You will be nimble and alter your team's approach based on an industry's standards and regulations. Coach team members across roles to help deliver better quality software and help them adopt a testing mindset. Advocate QA expertise to the tech community inside Thoughtworks and throughout the broader industry, speaking at conferences and acting as a mentor for junior-level QAs. Job qualifications Technical Skills You have worked as a Quality Analyst

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Vulnerability Analyst Overview Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management. Role • Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement. • Conduct penetration testing of web, mobile, and API-based applications. • Assess risk, prioritize findings, and provide remediation guidance. • Partner with product and engineering teams to drive timely remediation and validate fixes. • Develop reporting and metrics to measure program effectiveness and communicate risk. All About You • At least 3 years of experience in application security and penetration testing • Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks. • Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms. • Ability to assess vulnerabilities, communicate risk, and provide actionable remediation gu

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: Drata is looking for a Total Rewards Analyst to strengthen the accuracy, scalability, and insightfulness of our compensation programs while providing reliable support across benefits and broader total rewards operations. This compensation-led role will turn market data and employee data into clear recommendations, support annual compensation and equity cycles, and help leaders make

About the role As a Senior Business Analyst, TPRM, you will support the assessment and ongoing oversight of third party relationships, including vendors and partners, throughout the third party risk management lifecycle. You will assess third party risk, conduct business due diligence, and coordinate additional risk assessments with cross-functional partners. You will help ensure risks are appropriately identified, documented, and addressed while working closely with business owners, risk partners, and Chime’s bank partners. This role requires strong analytical judgment, attention to detail, and the ability to manage multiple assessments and stakeholders. You will serve as a trusted partner to the business while contributing to the continued development and maturity of Chime’s TPRM program. In this role, you can expect to Review and challenge Inherent Risk Questionnaires (IRQs), working with business owners to understand vendor relationships, validate information, and determine appropriate inherent risk and criticality ratings. Coordinate due diligence activities with cross-functional risk partners and subject matter experts across areas such as Information Security, Privacy, Compliance, Enterprise Risk Management, and Legal. Conduct business due diligence, including reviews of corporate registration, reputational information, insurance coverage, and other relevant documentation, and coordinate additional activities such as background checks. Manage assigned third party assessments through completion, coordinating with business owners and cross-functional risk partners to address questions, follow up on outstanding requirements, and escalate concerns as appropriate. Facilitate vendor approval processes with Chime’s bank partners, including coordinating assessment information, responding to follow-up requests, and tracking approvals through completion. Identify and document issues arising from TPRM assessments and partner with relevant stakeholders to track third par

Procurement Analyst (Procurement Analyst-General) Company: The Boeing Company Boeing Defense, Space & Security (BDS) has an exciting opportunity for an Experienced Procurement Analyst (Level 3) to join our dynamic Chinook team in Ridley Park, Pennsylvania . Position Responsibilities: Defines, designs, plans and deploys internal/external projects Develops processes and tools to measure key performance indicators Extracts, analyzes and prepares reports to measure key supplier and internal performance-to-plan Develops, documents and implements processes and systems in support of company goals Supports the development and implementation of strategies Identifies and implements improvements to streamline and automate process flows Distributes, updates and tracks procurement plans for supply chain integration and procurement analysis Assesses and reports compliance to internal/external stakeholders Develops risk mitigation plan This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. Shift: This position is for 1st shift. Basic Qualifications (Required Skills/Experience): More than 5 years of experience using all the following Microsoft Office Applications (Word, Excel and PowerPoint. More than 5 years of experience working with analytics, data and spreadsheets to build presentations and make recommendations Experience supporting deliverables for both internal and external customers. More than 5 years of experience working across multiple business units and interfacing with k

Do work that matters. At AlertMedia, we're the leading Risk Intelligence and Response company helping organizations protect their people and businesses. Our mission is simple but critical: to save lives and minimize loss by identifying emerging threats worldwide and enabling timely communication when emergencies impact personal safety or business continuity. Everything we do is guided by our core values: We’re humans not robots Customers always come first We work better together Simplicity is our strength Our reputation is priceless Hard work pays off AlertMedia is seeking a Strategic Intelligence Analyst ( Shift: Tues-Sat, 9am-5pm CT) to join our Global Intelligence team. This role will focus primarily on the Americas region, including the United States, Canada, Mexico, Central America, South America, and the Caribbean. This role will play a critical part in helping customers understand and prepare for events and emerging risks that may impact their people, operations, and business continuity. As a Strategic Intelligence Analyst, you will leverage open-source intelligence, analytical tradecraft, and a variety of intelligence sources to identify, assess, and communicate risks associated with future events, geopolitical developments, evolving global trends, and activist movements. A primary focus of this role will be monitoring and assessing planned and emerging events across the Americas, including demonstrations, protests, labor actions, counter-protests, political rallies, major public gatherings, and other activity that may create operational, travel, safety, or reputational impacts for organizations. Additionally, you will serve as a regional intelligence resource for the Americas, monitoring the region for significant developments; elections and transition periods; political activity; organized crime and cartel-related security trends; border, migration, and transport issues; and emerging trends that may affect customers and their employees. In addi

Team/Role Overview The Client Onboarding Analyst is a trainee professional role. Requires a good knowledge of the range of processes, procedures and systems to be used in carrying out assigned tasks and a basic understanding of the underlying concepts and principles upon which the job is based. Good understanding of how the team interacts with others in accomplishing the objectives of the area. Makes evaluative judgements based on the analysis of factual information. They are expected to resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents. Must be able to exchange information in a concise and logical way as well as be sensitive to audience diversity. Limited but direct impact on the business through the quality of the tasks/services provided. Impact of the job holder is restricted to own job. What you'll do Remediate data in the Clients and Security Coding systems Perform trend analysis and identify root causes Implement or suggest solutions based on the root cause analysis Liaise with other teams globally to ensure data quality is remediated Provide a high level of customer service to our internal stakeholders Own ad-hoc projects from inception through to completion Provide tangible metrics to Management Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. What we'll need from you Experience in managing various data remediation work st

The Applications Development Senior Programmer Analyst is an intermediate level position responsible for participation in the establishment and implementation of new or revised application systems and programs in coordination with the Technology team. The overall objective of this role is to contribute to applications systems analysis and programming activities. Responsibilities: Conduct tasks related to feasibility studies, time and cost estimates, IT planning, risk technology, applications development, model development, and establish and implement new or revised applications systems and programs to meet specific business needs or user areas Monitor and control all phases of development process and analysis, design, construction, testing, and implementation as well as provide user and operational support on applications to business users Utilize in-depth specialty knowledge of applications development to analyze complex problems/issues, provide evaluation of business process, system process, and industry standards, and make evaluative judgement Recommend and develop security measures in post implementation analysis of business usage to ensure successful system design and functionality Consult with users/clients and other technology groups on issues, recommend advanced programming solutions, and install and assist customer exposure systems Ensure essential procedures are followed and help define operating standards and processes Serve as advisor or coach to new or lower level analysts Has the ability to operate with a limited level of direct supervision. Can exercise independence of judgement and autonomy. Acts as SME to senior stakeholders and /or other team members. Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguard

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. Security engineers at Spotify protect our platform, employees, creators, and more than 700 million users. We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment. You will work within our detection engineering squad where the team owns alert triage, security investigations, threat hunting, and the detection engineering lifecycle. You will turn threat intelligence, incident learnings, and analyst feedback into effective detections and investigation workflows. You will partner closely with the detection infrastructure squad, which builds and operates Detection and Response platforms and telemetry pipelines, and with teams across Spotify to make sure your squad has the signals and capabilities needed to detect and respond to threats at Spotify's scale. We are a distributed team that values curiosity, sound judgment, clear communication, and continuous learning. We teach and learn from one another, adapt as the threat landscape changes, and focus our effort according to business needs and risk. What You'll Do Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available. <li style="font-size: 11pt; font-family: Arial, sans-serif

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Prism team builds the systems that turn Elastic Security's raw data into a trustworthy picture of the users, hosts, and services in a customer's environment. We power the Entity Store, entity risk scoring, entity resolution, and the data maintainers that analysts rely on to understand who did what, what's risky, and what to investigate next. We build features that have to work at scale, and we care deeply about correctness and performance. As a senior engineer, you will lead technical work across this area. You'll partner with product, design, and engineering to turn hard, ambiguous problems into reliable, performant systems that ship to real security teams. We're a distributed team — we work across time zones and collaborate in GitHub, Slack, design reviews, and code reviews. What You Will Be Doing Own small-to-medium projects from technical design through production, including data modeling, background tasks, and APIs. Make our features fast and reliable at scale: profile and optimize queries, tame timeouts, and design for a range of customer topologies. Write high-quality TypeScript and React code, with Node.js services and APIs where needed. Build telemetry, tests, and safeguards so the systems behave predictably in production. Review code, support teammates, and improve team practices. Partner with teams ac

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Prism team builds the systems that turn Elastic Security's raw data into a trustworthy picture of the users, hosts, and services in a customer's environment. We power the Entity Store, entity risk scoring, entity resolution, and the data maintainers that analysts rely on to understand who did what, what's risky, and what to investigate next. We build features that have to work at scale, and we care deeply about correctness and performance. As a senior engineer, you will lead technical work across this area. You'll partner with product, design, and engineering to turn hard, ambiguous problems into reliable, performant systems that ship to real security teams. We're a distributed team — we work across time zones and collaborate in GitHub, Slack, design reviews, and code reviews. What You Will Be Doing Own small-to-medium projects from technical design through production, including data modeling, background tasks, and APIs. Make our features fast and reliable at scale: profile and optimize queries, tame timeouts, and design for a range of customer topologies. Write high-quality TypeScript and React code, with Node.js services and APIs where needed. Build telemetry, tests, and safeguards so the systems behave predictably in production. Review code, support teammates, and improve team practices. Partner with teams ac

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Prism team builds the systems that turn Elastic Security's raw data into a trustworthy picture of the users, hosts, and services in a customer's environment. We power the Entity Store, entity risk scoring, entity resolution, and the data maintainers that analysts rely on to understand who did what, what's risky, and what to investigate next. We build features that have to work at scale, and we care deeply about correctness and performance. As a senior engineer, you will lead technical work across this area. You'll partner with product, design, and engineering to turn hard, ambiguous problems into reliable, performant systems that ship to real security teams. We're a distributed team — we work across time zones and collaborate in GitHub, Slack, design reviews, and code reviews. What You Will Be Doing Own small-to-medium projects from technical design through production, including data modeling, background tasks, and APIs. Make our features fast and reliable at scale: profile and optimize queries, tame timeouts, and design for a range of customer topologies. Write high-quality TypeScript and React code, with Node.js services and APIs where needed. Build telemetry, tests, and safeguards so the systems behave predictably in production. Review code, support teammates, and improve team practices. Partner with teams ac