GRC Consultant

Job Title

Location

Experience

Employment Type

Job Summary

Third Party Risk Management (TPRM) Consultant/Senior Consultant

Key Responsibilities

• Conduct third-party risk assessments covering cybersecurity, compliance, financial, operational, and reputational risks.
• Evaluate vendors' security posture using industry-standard frameworks such as

  ISO 27001

  ,

  NIST

  ,

  SOC1/SOC2

  , etc.
• Review vendor documentation, including risk questionnaires, certifications, penetration testing reports, and audit reports.
• Support ongoing monitoring and periodic reassessments of vendors.
• Liaise with internal stakeholders and vendors to clarify risks, controls, and remediation plans.
• Document findings and prepare risk assessment reports and dashboards.
• Support in automation tools (e.g., Archer, ProcessUnity, OneTrust, or similar TPRM platforms).
• Ensure timely tracking and closure of identified risks and exceptions.
• Stay updated on TPRM best practices, emerging threats, and compliance requirements (e.g., GDPR, HIPAA, etc.).

Requirements

• 3+ years

  of relevant experience in

  TPRM, information security, GRC, or risk assessment

  roles.
• Hands-on experience in reviewing vendor assessments, security documents, and compliance certifications.
• Strong understanding of

  information security standards

  (ISO 27001, NIST, SOC2).
• Excellent communication skills for interacting with US-based stakeholders.
• Familiarity with third-party risk platforms (ProcessUnity, Archer, OneTrust, etc.) is a plus.

• Certifications

  such as

  CISA, ISO 27001 LA/LI, CRISC, or CISSP

  will be an added advantage.

Why Join Us?

• Opportunity to work with

  global clients

  in a high-impact, security-first environment
• Flexible and collaborative culture
• Career advancement and skill development opportunities