information security risk analyst

Ropes & Gray LLP

<div>About Ropes &amp; Gray:

Ropes &amp; Gray is a preeminent global law firm. The firm has been ranked in the top three on The American Lawyer's prestigious A-List for eight consecutive years and #1 on Law.com's UK A-List twice in the past three years - rankings that honor the &quot;best of the best&quot; law firms. 
 
The firm has approximately 2,500 lawyers and professionals serving clients in major centers of business, finance, technology, and government in Boston, Chicago, Dublin, Hong Kong, London, Los Angeles, Milan, New York, Paris, San Francisco, Seoul, Shanghai, Silicon Valley, Singapore, Tokyo and Washington, D.C. 
 
The firm has consistently been recognized for its leading practices in many areas, including asset management, private equity, M&amp;A, finance, real estate, tax, antitrust, life sciences, health care, intellectual property, litigation &amp; enforcement, privacy &amp; cybersecurity, and business restructuring. 
 
Ropes &amp; Gray is an equal opportunity employer.
Overview:
<div>
Reporting to the Manager of Information Security Risk &amp; Compliance, the information security risk &amp; compliance analyst assists in the management and execution of the firm&rsquo;s data security, compliance, and risk management programs. The position supports information security, privacy, compliance, and data governance initiatives and helps promote a culture of information security throughout the organization. The role requires a basic understanding of IT systems and security concepts, and a willingness to learn and grow in the field.</div>
Responsibilities:
<ul><li>Assist in maintaining the firm&rsquo;s ISO 27001:2022 Information Security Management System, assist with SOC2 audit preparedness and SOC2 audit completion, and support additional compliance activities as needed.</li><li>
Support the firm&rsquo;s initiatives to be at the forefront of GenAI and legal technology, reviewing vendor offerings and providing guidance on secure-by-design principals that meet or exceed industry standards.</li><li>
Support monitoring of the firm&rsquo;s policies and procedures.</li><li>
Help coordinate vulnerability management activities with guidance from other team functional areas.</li><li>
Assist in vendor risk management program tasks.</li><li>
Support responses to client audits, client RFPs, and related requests.</li><li>
Help coordinate third party technical risk assessments and audit activities.</li><li>
Assist in producing and maintaining information security documentation, including policies, procedures, standards, guidelines, and diagrams.</li><li>
Help assess potential items of risk and opportunities of vulnerability in the network</li><li>
Assist in Change Management and architecture reviews of new and existing firm technology.</li><li>
Participate in knowledge transfer sessions and training with senior team members.</li><li>
Promote a culture of information security across business units under guidance.</li><li>
Learn about the role of systems and technology within the firm and their value to the business.</li></ul><div>
OTHER RESPONSIBILITIES:</div><ul><li>
Pursue relevant security certifications and attend industry seminars and continuing education events as assigned.</li><li>
Perform other related duties as assigned.</li></ul>
Qualifications:
<div>
EDUCATION, EXPERIENCE AND SKILLS REQUIRED:</div><ul><li>
Bachelor of Science in a technology-related discipline or 1-2 years of relevant experience</li><li>
1-2 years of experience in information security, IT risk management, or IT support</li><li>
Basic knowledge of ISO 27001:2022 and risk management frameworks (ISO 27005, NIST, COBIT 5).</li><li>
Knowledge of SOCII audit criteria and procedures.</li><li>
Basic understanding of HIPAA and data security regulations</li><li>
Familiarity with Microsoft, Cisco, Unix/Linux, and mobile technologies</li><li>
Strong written and oral communication skills</li><li>
Organized, responsive, and willing to learn</li><li>
Security certification (such as Security+, SSCP, or similar) preferred but not required</li></ul><div>
ESSENTIAL CAPABILITIES:</div><ul><li>
Ability to relate to non-technical users in user-friendly language</li><li>
Ability to understand technical implications of security threats with guidance</li><li>
Ability to manage multiple tasks and prioritize under supervision</li><li>
Ability to maintain confidentiality of internal and personnel affairs</li><li>
Ability to work well with others and contribute to team spirit</li><li>
Self-motivated and eager to develop professionally</li><li>
Ability to work in a multi-office environment and willingness to travel as required</li><li>
Ability to work effectively in a culturally and educationally diverse environment</li></ul>
Compensation and Total Rewards Package:

Ropes &amp; Gray is proud to offer a comprehensive Total Rewards package to our business support team members. The firm also offers comprehensive health and well-being benefits, personal and professional development, career growth opportunities and a collegial and supportive culture. The anticipated pay range for this role is listed below and represents our good faith and reasonable estimate of the starting salary range at the time of posting. In addition, this role is eligible for a discretionary bonus based on performance. The actual offered rate for this position will be determined based on job-related, non-discriminatory factors, including qualifications and experience, geographic location, education, external market data and consideration of internal equity.<ul><li>
Boston: $88,600 - $135,100</li><li>
New York: $96,600 - $147,300</li></ul>
Working Conditions:

This position requires hybrid on-site presence as an essential function of the role. Consistent and predictable on-site presence is required for ongoing business continuity, professional development and effective collaboration with colleagues and management.</div>

Information Security Risk & Compliance Analyst

Ivanti

<div>Are you an experienced Security Data and Risk Analyst that wants to develop and create awareness around security-relevant key performance and key risk indicators? At Ivanti, we work passionately and authentically, striving to win together and make a real impact for our customers and each other. Join us to elevate your career and help deliver innovative solutions in a dynamic, empowering environment.

Why this role matters

As the Security Data and Risk Analyst, you will generate enterprise visibility, awareness and understanding of major risk and security issues in a comprehensive and easily consumed manner to support the corporate objectives and especially the reduction of risk. You will be a leader in our Information Security Group which is a global team of experienced professionals dedicated to ensuring the security of Ivanti's products, corporate and production networks, environments, and of course, its data

What you'll do:
<ul>
<li>Lead the execution of multiple functions: Taking ownership of and creating awareness around security-relevant key performance and key risk indicators</li>
<li>Develop automation for data gathering, analysis and presentation using Python and Go</li>
<li>Educate as well as inform audiences of a wide variety of security and risk expertise, including building libraries of material to support understanding of benefits and costs of security management.</li>
<li>Generating insights and supporting information for decisions to be made including wrangling data from complex data sets and data sources</li>
<li>Create dynamic dashboards and presentations</li>
<li>Articulate risk and risk management as realistic, measurable harm; Create dynamic dashboards and presentations</li>
<li>Support the Security Governance and executive workstreams, including analysis and presentations materials.</li>
<li>Coordinate, chair and present data to management, leadership and C-suite stakeholders in their languages.</li>
</ul>
What you will bring:
<ul>
<li>Minimum of a bachelor's degree, preferably in information systems or data analytics.</li>
<li>4+ years' experience with Python automation with multiple versions of Python</li>
<li>4+ years Go programming (Golang) automation and scripting</li>
<li>1+ years dashboard building</li>
<li>1+ years experience with 1 or more of the following security items: SOC, SIEM (Security Information &amp; Event Management), Application Security (AppSec), or vulnerabilities and incident management.</li>
<li>2+ experience with Risk Management</li>
<li>1 years' experience with Risk Modeling</li>
<li>4+ years Data Analytics experience</li>
<li>Familiarity with information security and security terms</li>
<li>Experience conducting reporting operations such as presentations, metrics, dashboards, KPIs, KRIs, OKRs.</li>
<li>1 year experience executing/leading project management efforts in a technology-related arena.</li>
<li>Can show evidence has created effective KPIs, KRIs and OKRs and a means to measure and report each.</li>
<li>Ability to articulate themes from: NIST, ISO, SOC 2, FedRAMP, GDPR and DORA, and Security, Privacy principles.</li>
<li>Experience with information application security, system security and cybersecurity.</li></ul> 


Why Ivanti?
<ul>
<li>Friendly flexible working model: Empower excellence whether you're at home or in the office and support work-life balance.</li>
<li>Competitive compensation &amp; total rewards: Including health, wellness, and financial plans tailored for you and your family.</li>
<li>Global, diverse teams: Collaborate with talented people from 23+ countries.</li>
<li>Learning &amp; development: Grow your skills with access to best-in-class learning tools and programs.</li>
<li>Equity &amp; belonging: We value every voice. Your story helps inform our solutions for a changing world.</li>
</ul>
What drives us

Ivanti's mission is to elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.

It is through diverse and inclusive hiring, decision-making, and commitment to our employees and partners that we will continue to build and deliver world-class solutions for our customers.

To learn more about Ivanti's Mission and Core Values.

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We're committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.

Need adjustments during the process? Reach out to talent@ivanti.com we're happy to help. 


#LI-Remote</div>

Information Security Data and Risk Analyst

Tire Rack

<div>Sr. Information Security GRC Analyst

Location: Tire Rack &ndash; South Bend, IN (On-Site) 
Department: Information Security

Employment Type: Full-Time 
Salary Range: $115,000-$125,000 annually 


About the Role

Tire Rack is seeking a Senior Information Security GRC Analyst to support and advance our Information Security Governance, Risk, and Compliance (GRC) program

.

In this role, you will assess and strengthen IT and security controls across the organization while ensuring alignment with regulatory, statutory, and industry security standards including ISO/IEC 27001:2022, PCI DSS, and internal security policies. 


This position works closely with IT teams, business leaders, and audit stakeholders to identify risk exposures, strengthen control frameworks, support audit readiness, and drive continuous improvement in Tire Rack&rsquo;s overall security posture. 


This role requires a strong mix of technical understanding, risk assessment expertise, and the ability to translate compliance requirements into practical, business-aligned security controls. 


At Tire Rack, we operate with the values of IOOGA &mdash; Integrity, Our People, Our Customers, Growth, and Attitude. 


What You'll Do 


Governance, Risk &amp; Compliance Leadership
<ul><li>
Advise IT and business stakeholders on governance, risk, and compliance requirements by interpreting regulatory, statutory, and security standards and translating them into actionable control recommendations.</li><li>
Lead and support the organization&rsquo;s information security risk management program, including risk identification, assessment, documentation, and monitoring mitigation strategies.</li><li>
Evaluate technology risks and recommend practical mitigation strategies aligned with business objectives.</li></ul>

Controls &amp; Compliance
<ul><li>
Develop and maintain GRC program documentation including:</li><li><ul><li>
Security policies</li><li>
Standards and procedures</li><li>
Risk registers</li><li>
Control inventories</li><li>
Evidence repositories</li></ul>
</li><li>Strengthen internal security controls by identifying opportunities to improve standardization, documentation, and compliance alignment.</li><li>
Define and communicate control expectations, testing procedures, and audit evidence requirements across teams.</li></ul>

Audit &amp; Testing
<ul><li>
Coordinate internal and external audits, including planning, evidence collection, stakeholder coordination, and remediation tracking.</li><li>
Execute security control testing by:</li><li><ul><li>
Defining scope</li><li>
Reviewing and validating evidence</li><li>
Documenting results</li><li>
Identifying deficiencies</li><li>
Tracking remediation through resolution.</li></ul>
</li><li>Manage compliance findings, corrective actions, and risk acceptance documentation.</li></ul> 


Program Improvement
<ul><li>
Support security initiatives and technology projects by embedding governance, risk, and compliance practices into delivery.</li><li>
Track program metrics, audit results, and compliance trends to improve security maturity over time.</li><li>
Provide recommendations to strengthen Tire Rack&rsquo;s overall security and compliance framework.</li><li>
Perform other duties as assigned in support of the Information Security and Technology organization.</li></ul>

What We're Looking For

We are looking for a security professional who brings both technical understanding and risk management expertise while partnering effectively across teams. 


Required Experience
<ul><li>
5&ndash;7 years of experience in IT, cybersecurity, risk management, audit, or compliance roles.</li><li>
Strong knowledge of information security frameworks including:</li><li><ul><li>
ISO/IEC 27001</li><li>
PCI DSS</li><li>
Familiarity with GDPR concepts</li></ul>
</li><li>Understanding of IT environments, systems, and security controls across infrastructure, applications, and data environments.</li></ul>

Skills &amp; Competencies
<ul><li>
Strong analytical and problem-solving abilities with the capacity to identify trends, patterns, and control risks.</li><li>
Ability to evaluate control design and operational effectiveness.</li><li>
Excellent documentation, organization, and attention to detail.</li><li>
Strong communication skills with the ability to explain complex technical or compliance concepts to both technical and non-technical audiences.</li><li>
Ability to work independently while collaborating effectively with cross-functional stakeholders.</li></ul>

Required Certifications (One or more)

Candidates must possess one or more of the following professional certifications, or be able to obtain one within a reasonable period after hire:
<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CRISC (Certified in Risk and Information Systems Control)</li><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CompTIA Security+</li></ul>

Equivalent or comparable information security, audit, risk, or compliance certifications may also be considered. 


Education
<ul><li>
Bachelor&rsquo;s Degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.</li></ul>

Work Schedule

Work Days: 
Monday through Friday 
Occasional weekends may be required.

Work Hours: 
8:00 a.m. &ndash; 5:00 p.m. 
Additional hours may be required depending on project or audit needs. 


#HP</div>

Sr. Information Security GRC Analyst

SSC HR Solutions

<div>
 
 Job Purpose:
 
 
 
 Support the implementation, monitoring, and continuous improvement of information security governance, risk management, and compliance program. This role contributes directly to maintaining ISO 27001:2022 certification, supporting surveillance and external audits, driving KPI/KRI reporting, and enabling the maturity and scalability of GRC processes.
 
 
 Job Responsibilities:
 
 
 &squf; Support the development, implementation, and enhancement of the Information Security Management System (ISMS) in line with ISO 27001:2022 .
 
 
 &squf; Assist in maintaining GRC policies, procedures, and standards aligned with regulatory and business requirements
 
 
 &squf; Gather and report on security-related KPIs and KRIs to monitor control effectiveness and program health
 
 
 &squf; Participate in risk assessments, maintain the risk register, and support mitigation tracking
 
 
 &squf; Contribute to internal and external audit readiness, including ISO surveillance visits
 
 
 &squf; Collaborate with internal stakeholders to promote security awareness and compliance culture
 
 
 &squf; Support the implementation and use of GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust)
 
 
 &squf; Engage with ongoing projects to support secure development practices, compliance checks, and risk registers
 
 
 &squf; Prepare documentation and participate in quarterly ISMS and GRC reporting cycles
 
 
 &squf; Operates under the direction of the GRC Manager with a focus on execution and coordination, not strategic program ownership
 
 
 
 Job Skills and Abilities:
 
 
 
 <ul>
 <li>
 Basic understanding of ISO 27001and risk frameworks
 </li>
 <li>
 Awareness of data protection laws
 </li>
 <li>
 Familiarity with risk management processes
 </li>
 <li>
 Clear communication and cross-functional collaboration
 </li>
 <li>
 Analytical and documentation skills
 </li>
 <li>
 Process-focused, detail-oriented mindset
 </li>
 <li>
 Ability to coordinate across departments on compliance topics
 </li>
 <li>
 Ability to manage multiple assignments under supervision
 </li>
 <li>
 Ability to collect and maintain reliable compliance data
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 Qualifications
 
 :
 
 
 <ul>
 <li>
 Bachelor's degree in computer science engineering
 </li>
 <li>
 2-6 years of experience in information security, risk management, or GRC roles
 </li>
 <li>
 Exposure to ISO 27001
 </li>
 <li>
 Experience with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust) is a plus
 </li>
 <li>
 Certifications preferred: ISO/IEC 27001 Foundation or Implementer, CompTIA Security+, CISA, CRISC
 </li>
 </ul>
</div>

Information Security Governance Analyst

Abu Dhabi Islamic Bank - Egypt

<div>
 
 
 
 Strategic objectives:
 
 
 
 
 Support Information security strategic program milestones
 
 
 
 
 
 
 
 Functional Objective:
 
 
 
 
 
 Information Security Program
 
 
 
 Technical implementation of the Information security program and set actionable plan with IT.
 
 
 Establish reporting communications that support Information Security IT threat Intelligence activities
 
 
 Ensure implementation of necessary information security policies, standards, procedures and guidelines.
 
 
 
 
 
 
 Threat Intelligence
 
 
 
 Responsible for implementing of threat Intelligence program in parallel with threat vulnerability management program.
 
 
 Follow the procedures to align with cyber security incident handling program.
 
 
 Work closely with SOC to provide all needed information for proactive monitoring.
 
 
 Maintain a current understanding the threat landscape for the Banking industry and closely aligned with head of Incident handling to provide security operation centre with up to date of Indication of compromise.
 
 
 Maintaining the supported technologies and follow the processes for proactive actions against Zero Day Attacks and persistence threats.
 
 
 Responsible for determining enterprise Information security standards, ensuring bank is regulatory compliant with the rules for relevant bodies, enforce adherence to security practices.
 
 
 
 
 
 
 Risk Identification, classification ,assessment and evaluation
 
 
 
 Monitor information Security assessment to determine whether information systems are protected, and controlled. Collect information and review documentation to ensure that risks are identified and evaluated.
 
 
 Responsible for evaluate controls for information systems ( all IT systems) during the requirements, acquisition, development and testing phases for compliance with the Information Security policies, standards, procedures and applicable external requirements ,ensure Information security risks are addressed which could lead to organization financial and reputation loss.
 
 
 Evaluate the design, implementation and monitoring of system and logical security controls to verify the confidentiality, integrity and availability of information, this to ensure overall Information Security that could lead to organization financial and reputation loss if data is breached.
 
 
 Maintain and Monitor the risk register to ensure that all identified risks highlighted with related accountability, Monitor existing risk to ensure that changes are identified and managed appropriately.
 
 
 Maintain the risk scenarios to estimate likelihood and impact of significant risks to the Information systems, Correlate identified risks to relevant business processes to assist in identifying risk ownership.
 
 
 Analyse risks, incidents and interdependencies to determine their impact on IT Systems and relative business objectives.
 
 
 Review IT Security Standards and Baselines
 
 
 Enable the measurement of IT Information security processes.
 
 
 Monitor the information systems (IT systems) control design and implementation processes against Information Security baselines and standards to ensure it is implemented effectively and within time.
 
 
 
 
 
 
 Risk and Control Monitoring
 
 
 
 Review and monitor key risk indicators (KRIs) to monitor and communicate their status to relevant stakeholders
 
 
 Identify the gap between current and desired risk levels to manage risk ,evaluate information security controls to determine whether they are appropriately and effectively mitigating the risk to defined acceptable level
 
 
 Monitor and Communicate key risk indicators (KRIs) and Management activities to assist relevant stakeholders in their decision-making Process
 
 
 Identify and report on risk including compliance to initiate corrective action and meet business regulatory requirements
 
 
 Ensure that risk assessments, vulnerability assessments and threat analysis are conducted periodically and consistently to identify risk to the organization&rsquo;s information.
 
 
 
 
 
 
 Information Security Risk Response
 
 
 
 Share the responsibility to Identify and evaluate Risk Response Options and provide IT managers with information to enable risk response decisions
 
 
 Apply Risk criteria to assist in the development of the risk profile for management approvals
 
 
 Assist in the development of business cases supporting the investment plan to ensure risk responses are aligned with identified business objectives
 
</div>

Cyber Threat Intelligence Analyst/ Senior Analyst

Booz Allen Hamilton

<div>Information Security Risk Specialist
The Opportunity:
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to Department of War (DoW) organizations. In all of this &ldquo;cyber noise&rdquo;, how can these organizations understand their risks and how to mitigate them? The answer is an information security risk specialist like you who will break down complex threats into manageable plans of action.
As an information security risk specialist on our team, you&rsquo;ll use your experience to work with DoW leaders to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll review technical and personnel details from subject matter experts to assess the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, whitepapers, and milestones.
You&rsquo;ll work with your customer to translate security concepts, so they can make the best decisions to secure their mission-critical networks. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity governance, risk management, and compliance.
Work with us as we protect our military's communications systems.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
5+ years of experience with IT operations or cybersecurity</li><li>
Experience in a cybersecurity compliance, operations, or engineering leadership role</li><li>
Experience supporting cybersecurity compliance, audits, or inspections</li><li>
Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation</li><li>
Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps</li><li>
Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts</li><li>
TS/SCI clearance</li><li>
HS diploma or GED</li><li>
Information Security Certification such as CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification</li></ul>
Nice If You Have:<ul><li>
Experience with defense or national security issues in the Indo-Pacific region</li><li>
Experience with working at a DoW Command-level Headquarters</li><li>
Experience with NIST 800-53 and DoD 8500 or 8510</li><li>
Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations</li><li>
Experience with Amazon Web Services (AWS), Azure or Google Cloud Platform (GCP)</li><li>
Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)</li><li>
Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data</li><li>
Ability to assist with developing cybersecurity policies or governance frameworks</li><li>
Possession of excellent verbal and written communication skills</li><li>
Bachelor's degree</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Information Security Risk Specialist

Daraz

<div>
 <ul>
 <li>
 Fraud Case Investigation &amp; Resolution: Conduct thorough post-transaction reviews of suspected fraud cases (e.g., account takeover, identity misuse, payment disputes); document findings, escalate when needed, and resolve cases within SLA.
 </li>
 <li>
 Strategy &amp; Alert Collaboration: Monitor and triage alerts from fraud detection systems; assist senior analysts in testing new rules or model thresholds under guidance, and provide actionable feedback on false positives/negatives to improve detection accuracy.
 </li>
 <li>
 Fraud Pattern Analysis: Analyze case-level data using basic SQL or visualization tools to identify emerging fraud trends and propose hypotheses for rule enhancements to the strategy team.
 </li>
 <li>
 Data Collection &amp; Reporting: Extract, summarize, and report on key fraud metrics&mdash;including loss patterns, alert volumes, and operational bottlenecks&mdash;through dashboards or scheduled reports.
 </li>
 <li>
 Process Adherence &amp; Compliance: Follow standardized investigation protocols, maintain audit-ready case documentation, and support internal or regulatory compliance requests.
 </li>
 <li>
 Cross-functional Coordination: Partner with Strategy, Product, and Tech teams to validate edge cases, test rule changes, and share frontline insights from case reviews.
 </li>
 <li>
 User &amp; Partner Communication: Liaise with customers, banks, or payment partners to collect evidence, facilitate dispute resolution, and explain fraud decisions clearly and professionally.
 
 
 </li>
 </ul>
 
 Job Requirements
 
 
 
 Must have:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Finance, Business, Economics, Computer Science, or a related field.
 </li>
 <li>
 3+ years of experience in fraud operations, or payment risk management within fintech, banking, or e-commerce; experience in Pakistan or other emerging markets (e.g., SEA, MENA) is a plus.
 </li>
 <li>
 Basic data literacy: able to write simple SQL queries or use dashboards (e.g., Tableau, Power BI) to extract and interpret case-level fraud data.
 </li>
 <li>
 Familiarity with common payment methods, especially in PK (e.g., mobile wallets like JazzCash/EasyPaisa, card networks, bank transfers) and awareness of fraud typologies (e.g., account takeover, identity fraud, stolen card).
 </li>
 <li>
 Strong attention to detail, process discipline, and ability to manage high-volume casework under SLA pressure. Experience working in fast-paced, high-growth digital financial services environments.
 </li>
 <li>
 Clear written and verbal communication skills in English; Optional regional languages (Chinese/Mandarin) a distinct advantage.
 
 
 </li>
 </ul>
 
 Preferred
 
 
 
 <ul>
 <li>
 Demonstrated curiosity about fraud strategy: e.g., has proposed process improvements, participated in antifraud strategy implementation, or analyzed false positive trends.
 </li>
 <li>
 Exposure to fraud detection tools or rule engines (e.g., Sift, internal risk systems) &mdash; even through training or limited hands-on use.
 </li>
 </ul>
</div>

Fraud Risk Analyst-Risk & Security

Search 10000+ Information security risk analyst jobs near you this March. New roles added regularly across leading industries. Apply today.