Qureos Mentor

Sage Publication

<div><h2 class="jobSectionHeader"><b>Job purpose</b></h2><p>
The purpose of the Cyber Security Risk Analyst is to own the risk assessment lifecycle and lead detailed technical security audits across cloud and om-prem environments. This position will also be responsible for design and execution of IT controls testing, the evaluation of technical controls effectiveness, and for driving remediation with engineering and product teams.</p><h2 class="jobSectionHeader"><b>
key accountabilities</b></h2>
<div><ul><li>Lead technology and cyber risk assessments, maintaining a risk register with clear impact/likelihood rationales and treatment plans.</li></ul>
<ul><li>Map controls to frameworks (ISO/IEC 27001:2022/27002, NIST CSF 2.0, NIST 800&#8209;53, CIS Controls, PCI DSS 4.0) and regulatory obligations (GovRAMP, EU AI Act, GDPR, CCPA).</li></ul>
<ul><li>Support policy/standard updates and control design reviews; advise on risk appetite, KRIs, and control maturity targets.</li></ul>
<ul><li>Conduct security risk assessments, identifying threats, vulnerabilities, and control gaps.</li></ul>
<ul><li>Maintain the security risk register, define treatment plans, and monitor remediation progress.</li></ul>
<ul><li>Support quantitative or qualitative risk analysis (e.g., FAIR-lite) for critical assets and processes.</li></ul>
<ul><li>Conduct deep dive security reviews, identifying threats, vulnerabilities and control gaps.</li></ul>
<ul><li>Plan and execute end-to-end technical audits including scope, testing plans, evidence requests, fieldwork, sampling, walkthroughs, and issue rating.</li></ul>
<ul><li>Develop control frameworks for secure software development and execute audits having a good understanding of agile software development practices and security by design principles (DevSecOps).</li></ul>
<ul><li>Produce clear, actionable audit reports and present findings to engineering leadership and risk committees.</li></ul>
<ul><li>Test design and operating effectiveness of Access Control, Application and Data Security, IT Service Operations, Technology Architecture, Logical and Physical Security.</li></ul>
<ul><li>Validate evidence, perform re-performance/inspection, and document results according to audit best practices.</li></ul>
<ul><li>Track remediation to closure; verify fixes and update control matrices.</li></ul>
<ul><li>Perform third-party risk assessments, reviewing security posture, contractual controls, and data flows.</li></ul>
<ul><li>Contribute to AI governance and data protection audits where relevant.</li></ul>
<ul><li>Partner with security engineering, IT, data, and product teams to translate requirements into technical controls and pragmatic remediation.</li></ul>
<ul><li>Create playbooks, control testing procedures, and knowledge articles; run enablement sessions to raise control maturity.</li></ul>
<ul><li>To combine a risk and compliance mindset with strong technical depth in modern enterprise security tooling.</li></ul>
<ul><li>Proven experience in cyber security with demonstrable experience in risk assessment and security auditing.</li></ul>
<ul><li>Audit and security certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor/Implementer or equivalent experience.</li></ul>
<ul><li>Strong knowledge of ISO 27001/27002 and NIST CSF, with familiarity across NIST 800&#8209;53, CIS Controls, and SOC 2 or PCI DSS.</li></ul>
<ul><li>Hands-on experience assessing Microsoft and Azure security including Entra ID, Defender suite, Sentinel, Intune, Azure Policy, and Purview.</li></ul>
<ul><li>Experience with Identity and Access, Cloud Security (Azure, AWS), Data Protection, SecOps, Agile Software Development (DevSecOps), Security by Design.</li></ul>
<ul><li>Solid grasp of ITGCs and evidence-based testing methods; excellent audit documentation and reporting skills.</li></ul>
<ul><li>Technical literacy across networks, identity, cloud, endpoints, logging/monitoring, and secure configuration.</li></ul>
<ul><li>Competence in using GenAI to enhance work practices and have experience in using Agentic AI to automate GRC processes.</li></ul>
<ul><li>Ability to develop relationships with key technical position holders across locations and functions</li></ul>
<ul><li>Excellent communication skills with the ability to express ideas and messages clearly, both written and verbally
</li></ul></div><h2 class="jobSectionHeader"><b>Skills, Qualifications &amp; Experience</b></h2>
<div><ul><li>To combine a risk and compliance mindset with strong technical depth in modern enterprise security tooling.</li></ul>
<ul><li>Proven experience in cyber security with demonstrable experience in risk assessment and security auditing.</li></ul>
<ul><li>Audit and security certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor/Implementer or equivalent experience.</li></ul>
<ul><li>Strong knowledge of ISO 27001/27002 and NIST CSF, with familiarity across NIST 800&#8209;53, CIS Controls, and SOC 2 or PCI DSS.</li></ul>
<ul><li>Hands-on experience assessing Microsoft and Azure security including Entra ID, Defender suite, Sentinel, Intune, Azure Policy, and Purview.</li></ul>
<ul><li>Experience with Identity and Access, Cloud Security (Azure, AWS), Data Protection, SecOps, Agile Software Development (DevSecOps), Security by Design.</li></ul>
<ul><li>Solid grasp of ITGCs and evidence-based testing methods; excellent audit documentation and reporting skills.</li></ul>
<ul><li>Technical literacy across networks, identity, cloud, endpoints, logging/monitoring, and secure configuration.</li></ul>
<ul><li>Competence in using GenAI to enhance work practices and have experience in using Agentic AI to automate GRC processes.</li></ul>
<ul><li>Ability to develop relationships with key technical position holders across locations and functions</li></ul>
<ul><li>Excellent communication skills with the ability to express ideas and messages clearly, both written and verbally</li></ul>
</div><ul>
</ul><p><b>Diversity, Equity, and Inclusion</b></p><p>
At Sage we are committed to building a diverse and inclusive team that is representative of all sections of society and to sustaining a culture that celebrates difference, encourages authenticity, and creates a deep sense of belonging. We welcome applications from all members of society irrespective of age, disability, sex or gender identity, sexual orientation, color, race, nationality, ethnic or national origin, religion or belief as creating value through diversity is what makes us strong.</p></div>

Cyber Security Risk Analyst

<p></p><div><div><p>Job Description</p><div> About Fyle (Now part of Sage)
<br>
Fyle is now part of Sage, a global leader in accounting and business management software. Together, we&rsquo;re building a global expense management solution that simplifies how businesses track, approve, and reconcile spending.
<br>
<br>
About the Role:
<br>
As an Associate Account Executive, you&rsquo;ll be at the forefront of our growth &mdash; owning the full sales cycle, demonstrating Fyle&rsquo;s value to prospects, and helping businesses revolutionize their expense management experience.
<br>
<br>
Why Join Fyle x Sage
<br>
Experience the agility of a startup with the reach of a global enterprise &mdash; shaping the frontend experience for thousands of businesses worldwide.
<br>
the frontend experience for thousands of businesses worldwide.
<br>
<br>
<li>Work with a fast-growing SaaS company that&rsquo;s scaling globally.
</li><br>
<li>Collaborate with a passionate, diverse, and fun team.
</li><br>
<li>Opportunity to grow within the Sage ecosystem.
</li><br>
<li>100% remote with flexible work culture.
</li><br>
<li>Competitive compensation, performance-based incentives, and global exposure</li><br>
<br>
<br>
What we are looking for:
<br>
<br>
<li>Sales Enthusiast: You thrive on building relationships and closing deals.
</li><br>
<li>Communicator Extraordinaire: You can confidently engage with stakeholders at all levels &mdash; from managers to C-suite executives.
</li><br>
<li>Tech-Savvy: You know your way around CRMs (bonus points for HubSpot).
</li><br>
<li>Driven and Organized: You manage multiple deals, stay focused, and never miss a follow-up.
</li><br>
<li>Flexible: You&rsquo;re comfortable working the 6:30 PM &ndash; 3:30 AM IST shift (US EST hours).</li><br>
<br>
<br>
#LI-AN1</div></div><br>
<div><p>
Key Responsibilities</p><div> What you&rsquo;ll do:
<br>
<li>Deliver compelling sales demos that highlight Fyle&rsquo;s unique capabilities.
</li><br>
<li>Maintain accurate, detailed records of every interaction in HubSpot CRM.
</li><br>
<li>Master the art of negotiation and guide prospects through the buying journey.
</li><br>
<li>Collaborate with Customer Success to ensure smooth post-sale transitions.
</li><br>
<li>Manage contracts, order forms, and documentation efficiently.
</li><br>
<li>Uncover customer pain points and position Fyle as the best solution.
</li><br>
<li>Meet and exceed monthly and quarterly sales targets.
</li><br>
<li>Work closely with marketing and product teams to continuously improve our go-to-market strategy.
</li><br>
<br>
#LI-AN1</div></div><br>
<div><p>
Function</p><div> Customer Operations</div></div><br>
<div><p>
Country</p><div> India</div></div><br>
<div><p>
Office Location</p><div> Bangalore</div></div><br>
<div><p>
Work Place type</p><div> Hybrid</div></div><br>
<div><p>
Advert</p><div> Working at Sage means you&rsquo;re supporting millions of small and medium sized businesses globally with technology to work faster and smarter. We leverage the future of AI, meaning business owners spend less time doing routine tasks, like entering invoices and generating reports, and more time pursuing their ambitions.<br>
<br>
Our colleagues are the best of the best. It&rsquo;s why we were awarded 2024 Best Places to Work by Glassdoor. Because to achieve extraordinary outcomes, we need extraordinary teams. This means infusing Sage with people who knock down barriers, continuously innovate, and want to experience their potential.
<br>
Learn more about working at Sage: sage.com/en-gb/company/careers/working-at-sage/<br>
Watch a video about our culture: youtube.com/watch?v=qIoiCpZH-QE<br>
<br>
We celebrate individuality and welcome you to join us if you embrace all backgrounds, identities, beliefs, and ways of working. If you need support applying, reach out at careers@sage.com.
<br>
Learn more about DEI at Sage: sage.com/en-gb/company/careers/diversity-equity-and-inclusion/</div></div></div>

Associate Account Executive

Join Sage Publication and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Sage Publication

ABOUT_COMPANY

Cyber Security Risk Analyst

Associate Account Executive