Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 12 hours ago

Senior Information Security Risk Analyst

Fam17 open roles

Where
Bengaluru
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Information Security Risk AnalystFam · Bengaluru

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Fam's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Fam postings stay open a median of 8 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 12 hours ago

Fam median: 8 days open

The posting

About Fam (previously FamPay)

Fam is India’s first payments app for everyone above 11. FamApp helps make online and offline payments through UPI and FamCard. We are on a mission to raise a new, financially aware generation, and drive 250 million+ young users in India to kickstart their financial journey super early in their life.

We’re reimagining how the next generation experiences fintech—going beyond payments to build a lifestyle brand that blends money, identity, and everyday experiences into one seamless, intuitive journey.

Founded in 2019 by IIT Roorkee alumni, Fam is backed by some of the most respected investors around the world like Elevation Capital, Y-Combinator, Peak XV (Sequoia Capital) India, Venture Highway, Global Founder’s Capital and the likes of Kunal Shah, Amrish Rao as angel investors.

Role Overview We are seeking a proactive and detailed-oriented IT Risk & Third-Party Risk Management (TPRM) Specialist to join our team. In this role, you will be responsible for executing cybersecurity risk assessments for our third-party vendors, suppliers, service providers and internal IT risk management processes. You will collaborate closely with IT, Engineering, Procurement, Legal, and Risk teams to identify, evaluate, and mitigate technology and vendor risks across the organization.

Must-Haves

  • Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance.
  • IT Risk Knowledge: Strong understanding of internal IT general controls (ITGC), access control, disaster recovery, cloud security concepts, and data protection principles.
  • Framework Familiarity: Working knowledge of industry frameworks and standards, such as RBI Framework for Outsourcing of Payment and Settlement-related Activities by PSOs, RBI MD on Cyber Resilience & Digital Payment Security Controls, ISO 27001, ISO 31000, and NIST CSF.
  • Artifact Evaluation: Demonstrated ability to review vendor reports, security certifications, penetration test summaries, and questionnaires.
  • Analytical & Communication Skills: Excellent analytical, organizational, and documentation skills with the ability to communicate risk findings clearly to both technical and business stakeholders.
  • Ownership: Proven ability to manage multiple vendor assessments and internal risk tasks simultaneously in a fast-paced environment.

Good to Haves

  • Professional certifications or active progress toward certifications such as CISA, CRISC, ISO 27001 LA/LI etc.
  • Prior experience working in financial services, technology, or other regulated environments.
  • Hands-on experience using GRC tools or dedicated Third-Party Risk Management platforms.
  • Basic awareness of AI-enabled features in GRC or risk tools
  • Experience supporting IT disaster recovery exercises or business continuity planning.

Roles & Responsibilities

1. IT Risk Management

  • Risk Assessment & Identification: Execute internal IT risk assessments across IT infrastructure, cloud environments, business applications, and operational workflows.
  • Risk Register Maintenance: Maintain and regularly update the enterprise IT Risk Register, tracking risk treatment plans, remediation timelines, and risk acceptance approvals.
  • Internal Controls Evaluation: Assess the effectiveness of internal IT controls, including access management, backup and disaster recovery, change management, and data security.
  • KRI & Risk Reporting: Monitor Key Risk Indicators (KRIs) and assist in preparing periodic risk reports and metrics for management and oversight committees.

2. Third-Party Cyber Risk Management (TPRM)

  • Vendor Risk Assessments: Perform end-to-end cybersecurity risk assessments for third-party vendors, suppliers, and external service providers.
  • Artefact Review & Analysis: Review vendor security documentation, including reports, certifications, penetration testing summaries, architecture diagrams, and security policies.
  • Questionnaire Evaluation: Review and evaluate vendor responses to cybersecurity questionnaires, due diligence requests, and risk evaluations.
  • Risk Quantification & Tracking: Assign vendor risk ratings, document identified gaps, establish remediation action plans, and track vendor progress on outstanding risk items.
  • Cross-Functional Collaboration: Work closely with Procurement, Legal, and stakeholder teams during vendor onboarding, ongoing monitoring, and contract reviews.
  • Incident Monitoring & Escalation: Monitor vendor-related security incidents and advisory alerts, escalating potential issues in accordance with incident response protocols.

Why Join Us

  • High ownership: Define and drive Fam’s IT risk posture from the ground up—shaping IT, IS & outsourcing risk frameworks.
  • Org-level impact: Influence decision-making at the highest levels, working cross-functionally with security, legal, engineering, vendors and leadership to embed a strong risk and compliance culture across the org.
  • Zero to one opportunity: Build scalable, audit-ready systems and processes in a fast-moving startup environment where your work directly enables product innovation and regulatory trust.
  • Mission-driven: Be part of India’s first payments platform purpose-built for teenagers and young adults—balancing growth with trust, responsibility, and user safety.

Perks That Go Beyond the Paycheck

• Relocation assistance to make your move seamless.

• Free office meals (lunch & dinner).

• Generous leave policy, including birthday leave, period leave, paternity and maternity support, and more.

• Salary advance and loan policies for any financial help.

• Quarterly rewards and recognition programs, and a referral program with great incentives.

• Access the latest gadgets and tools.

• Comprehensive health insurance for you and your family, mental health support.

• Tax benefits with options like food coupons, phone allowances, car/device leasing.

• Retirement perks like PF contribution, leave encashment and gratuity.

Here’s all the tea on FamApp ☕️

FamApp focuses on financial inclusion of the next generation by providing UPI & card payments to everyone above 11 years old. Our flagship Spending Account, FamX, seamlessly integrates UPI and card payments, enabling users to manage, save, and learn about their finances effortlessly.

Revolutionizing Payments and FinTech

FamApp has enabled 10 million+ users to make UPI and card payments across India, removing the inconvenience of carrying cash everywhere. Users get to customise their FamX card with doodles, which lets them add a personal touch to their payments.

Trusted by leading investors

We’re proud to be supported by renowned investors like Elevation Capital, Y-Combinator, Peak XV (formerly Sequoia Capital India), Venture Highway, Global Founder’s Capital, and esteemed angels Kunal Shah and Amrish Rao.

Join Our Dynamic Team

At Fam, our people-first approach is reflected in our generous leave policies, flexible work schedules, comprehensive health benefits, and free mental health sessions. We don’t mean to brag, but we promise you’ll be surrounded by some of the most fun, talented and passionate people in the startup space.

Want to see what makes life at Fam so awesome? Check out our shenanigans at @lifeatfam 😛

PS - We’re looking for someone with an AI-native mindset, who actively leverages AI in their day-to-day work, as we encourage and embed it across every level at Fam.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Fam's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Fam's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Fam's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.