Information Security Analyst (Government, Risk & Compliance)

Burns & McDonnell · Bangalore

Source and collection record

Last observed by our collector: 8 October 2026 at 11:13 pm IST. This is not a manual review or a confirmation from the employer.

Employer requisition: 261175

Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.

How sourcing and classification work · Report a discrepancy

Your application evidence checklist

Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.

Attendance and availability: I checked the employer page for work location, office attendance, start date and duration.Current requisition: I checked the current employer requisition and its application requirements.

0 of 2 checks marked. Keep unresolved requirements as questions for the employer.

Collected role description

**Description** + Conduct cybersecurity risk assessments and document findings, risk ratings, and recommendations + Lead third-party risk assessments for vendors, suppliers, and technology partners + Interpret regulatory, contractual, and framework requirements and apply them to business use cases + Support external audits, certifications, and client-facing security assessments + Advise stakeholders on mitigation strategies and track remediation progress + Analyze the security risk of new or existing computer applications, software or services + Deliver cybersecurity awareness training and simulated phishing activities developed by CAS + Lead CAS Objectives and Key Results (OKRs), initiatives, and projects with low to moderate operational impact to the business + Participate in the CAS Weekly Champion rotation and enhance Champion duties defined in the CAS Weekly Champion playbook + All other duties as assigned **Qualifications** + Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, or related field (or equivalent experience) + Demonstrated experience independently performing cybersecurity risk, compliance, or assurance activities + Experience engaging directly with business stakeholders or third parties on cybersecurity matters + Ability to translate security and compliance requirements into business-relevant guidance + Strong written and verbal communication skills + Applied experience with frameworks such as NIST, ISO 27001, SOC 2, or similar + Preferred professional cybersecurity certification (e.g., Security , CISA, CRISC, CISSP) This job posting will remain open a minimum of 72 hours and on an ongoing basis until filled. **Job** Information Technology **Primary Location** India-Karnataka-Bengaluru **Schedule:** Full-time **Travel:** No **Req ID:** 261175 **Job Hire Type** Experienced Not Applicable #BMI N/A

Collected experience requirement

Experienced