{"id":461303,"url":"https://alion.io/job/sun-king-cyber-risk-analyst-2","title":"Cyber Risk Analyst","company":{"id":177485,"name":"Sun King","domain":"sunking.com","url":"https://alion.io/company/sun-king","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New Delhi, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-05T11:06:27Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-27T03:24:06Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Job location: Remote in India \nAbout the role:\n We are looking for a Cyber Risk Analyst to strengthen our governance, risk, and compliance posture across the organization. In this role, the Cyber Risk Analyst will drive cyber security audits, vendor security reviews, business continuity (BCP/DR) drills, and security awareness initiatives, while supporting the implementation of frameworks such as NIST Cybersecurity Framework (CSF) and ISO 27001 ISMS. This role is ideal for someone who enjoys working cross-functionally, can communicate clearly with both technical and non-technical stakeholders, and is comfortable working remotely with high ownership and accountability.\nWhat you will be expected to do\n Cyber Security Audits & Assessments (30%)\nPlan and execute internal cyber security audits and control reviews across applications, infrastructure, and business processes.\nDocument findings, assess risk and impact, and track remediation through closure with respective teams.\n Vendor and Third-party Security Reviews (30%)\nConduct security due diligence for vendors and third parties: review security questionnaires, certifications, and technical controls to ensure they meet organizational requirements.\nIdentify and track vendor risks, recommend mitigation measures, and support contractual security requirements where needed.\n Business Continuity and BCP/DR drills (25%)\nWork with stakeholders to maintain and test business continuity and disaster recovery (BCP/DR) plans.\nPlan, coordinate, and document tabletop exercises and technical BCP/DR drills, track and follow up on corrective actions.\n Cyber Governance and Risk Management (10%)\nMaintain up-to-date security policies, standards, procedures, and guidelines, ensuring alignment with NIST CSF, ISO 27001, and relevant regulations.\nPrepare regular reports and dashboards on audit findings, risk status, BCP drill outcomes, vendor risk posture, and ISMS/NIST CSF progress for management.\nMaintain and update the cyber risk register, working with control owners and business stakeholders to identify, assess, and prioritize risks.\nPerform risk assessments (likelihood/impact), propose risk treatment options (mitigate, accept, transfer, avoid), and track treatment plans to closure.\n Cyber Security Awareness & Training (5%)\nDevelop and deliver cyber security awareness sessions and targeted training for employees, including phishing awareness, secure handling of data, and role-based security topics.\nCreate clear, engaging communication materials (presentations, FAQs, quick guides) to improve security culture.\nYou might be a strong candidate if you have/are\nBachelor's degree in any engineering discipline.\nAt least 3 years of experience in cyber governance, risk and compliance domain.\nExperience in implementing security controls and processes across business functions adhering to NIST CSF, ISO 27001 standards.\nPractical experience into at least 70% of the above-mentioned responsibilities.\nExposure to industry standards and regulations (e.g., SOC 2, ISO 27001, GDPR/DPDP etc.).\nSecurity certifications such as CISA, ISO 27001 Lead Implementer / Lead Auditor is preferred.\nAI-governance or AI-risk credentials such as ISO/IEC 42001 training, NIST AI RMF Architect/Lead Implementer, or recognized AI Security & Governance certifications is a strong plus.\nGood communication and interpersonal skills, with the ability to engage effectively with diverse stakeholders.\nWhat Sun King offers\nProfessional growth in a dynamic, rapidly expanding, high-social-impact industry\nAn open-minded, collaborative culture made up of enthusiastic colleagues who are driven by the challenge of innovation towards profound impact on people and the planet.\nA truly multicultural experience: You will have the chance to work with and learn from people from different geographies, nationalities, and backgrounds.\nStructured, tailored learning and development programs that help you become a better leader, manager, and professional through the Sun King Center for Leadership.","description_format":"text","description_chars":4027,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Storage","Information Security","Solar Energy"],"lifecycle":[{"event":"open","at":"2026-09-06T11:06:27Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.6,"p_room":0.28,"age_days":51,"expected_fill_days":23,"reasons":["conf:2","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/sun-king-cyber-risk-analyst-2","json_url":"https://alion.io/job/sun-king-cyber-risk-analyst-2.json","meta":{"generated_at":"2026-10-27T06:12:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6278,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177485},"rest":"https://alion.io/mcp/rest/get_company?id=177485"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsun-king-cyber-risk-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsun-king-cyber-risk-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsun-king-cyber-risk-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sun-king-cyber-risk-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsun-king-cyber-risk-analyst-2"}]}