Third-Party Security Analyst
Tradeweb · Bengaluru · onsite · Posted 33d ago
Undisclosed7–12 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Summary
Functional Title: Third-Party Security Analyst
Business Line/Department: Cyber Security
Experience: 7+ years
Notice Period: Immediate to 30 days
Location: Bangalore, India
Group Details Tradewebs Cyber Security team plays a critical role in protecting the firm, its clients, and its employees from an evolving third-party threat landscape. The Vendor Cyber Risk Analyst will be responsible for assessing, monitoring, and managing cybersecurity risks introduced by third-party vendors and service providers.
This role works closely with Procurement, Legal, Compliance, Technology, and Business teams to ensure vendor risks are identified, assessed, and mitigated in alignment with Tradewebs risk appetite and regulatory obligations. The ideal candidate brings strong cyber risk fundamentals, excellent communication skills, and experience operating in regulated financial environments.
Job Responsibilities - Lead and perform cybersecurity risk assessments for third-party vendors, suppliers, and service providers
- Review and analyze vendor security artifacts, including SOC 1/SOC 2 reports and ISO 27001 certifications
- Review penetration testing summaries, architecture diagrams, technical documents, and security policies
- Evaluate vendor responses to cybersecurity questionnaires and due diligence requests
- Define vendor risk ratings and document identified risks, gaps, and remediation plans
- Partner with Risk, Procurement, and Legal teams to support vendor onboarding and contract reviews
- Track vendor remediation efforts and follow up on outstanding risk items
- Monitor vendor-related security incidents and escalate issues in accordance with incident response procedures
- Act as a subject matter expert and advisor to internal stakeholders on vendor cyber risk matters
- Maintain vendor risk records, metrics, and reporting within GRC or vendor risk management platforms
- Drive continuous improvement of third-party cyber risk management processes, standards, and controls
- Support regulatory exams, audits, and internal reviews related to third-party cyber risk
- 7+ years of experience in cybersecurity, IT risk management, third-party risk management, or information security
- Strong understanding of cybersecurity principles, including access control, data protection, network security, and incident response
- Hands-on experience reviewing vendor security documentation (SOC reports, ISO certifications, risk assessments)
- Solid knowledge of security frameworks and standards such as NIST, ISO 27001, SOC, and CIS
- Experience using GRC or third-party risk management tools
- Ability to assess and communicate risk clearly to both technical and non-technical stakeholders
- Strong analytical, documentation, and organizational skills
- Proven ability to manage multiple vendor assessments simultaneously and meet deadlines with minimal supervision
- Basic awareness of AI-enabled features within cybersecurity or vendor risk platforms (e.g., automated risk scoring, workflow automation)
- Ability to interpret AI-assisted insights and apply human judgment to validate findings
- Experience in financial services or other highly regulated industries
- Professional certifications such as CISA, CRISC, CISSP, or Security+
- Familiarity with security rating services (e.g., BitSight, SecurityScorecard)
- Experience producing KPIs and risk reporting for senior management
Sourced from naukri
Skills
Due DiligenceAutomationCyberCisadata protectionauditscisspcrisccybersecurity riskCYBER RISKElectronic TradingFintechCyber SecurityCommunication SkillsArchitectureFinancial ServicescomplianceFinancial MarketsArtificial Intelligence
About Tradeweb
Tradeweb
Financial Services
59
employees
1996
30 years old
New York, New York
US
₹12.7L PA avg
Avg at Tradeweb
About
Tradeweb is a leading builder and operator of electronic marketplaces, connecting institutional, wholesale, retail, and corporate participants with unparalleled liquidity, advanced technology, and comprehensive data solutions to enhance price discovery, order execution, and trading efficiency. A Nasdaq-listed fintech pioneer, Tradeweb is driven by the belief that combining human connectivity with technology creates lasting value. Through long-term partnerships, innovative platforms, and robust trading networks, the company delivers efficient, informed, and effective ways to trade. With a rich legacy in fixed income and derivatives, and a rapidly expanding equity business, Tradeweb now serves more than 3,000 clients—including major banks, asset managers, hedge funds, insurers, wealth managers, and retail investors—across over 50 products in more than 85 countries. Its team of 1,400+ professionals, including more than 400 technologists, brings deep expertise in trading, sales, back office, compliance, and operations, creating solutions grounded in real-world market experience. Tradeweb continues to pioneer award-winning trading protocols, straight-through processing, post-trade analysis, and data services, while collaborating with market specialists to anticipate trends and shape the future of global electronic trading.
Industries
Financial Services
Employee ratings
0 reviews
4.9/ 5
Employees rate it well for
Compensation & Benefits50Work-Life Balance50
Find them on