Third-Party Risk Management Consultant (Pune)

Job Title:

Role Overview:

As a Consultant in ISMS or Third-Party Risk Management, you'll play a key role in conducting risk assessments, engaging stakeholders, and delivering audit reports with actionable insights. The role involves collaborating with compliance teams, auditors, and regulators to strengthen the organization’s security posture.

Key Responsibilities:

• Conduct ISMS/Third-Party Risk Assessments across people, processes, and technologies
• Engage with stakeholders to gather security, compliance, and regulatory requirements
• Identify risks, gaps, and improvement areas in policies, standards, and controls
• Prepare detailed audit and risk assessment reports with recommendations
• Ensure alignment with security frameworks like ISO27001, ISO22301, etc.

Required Experience & Skills:

• 2–4 years in Third-Party Risk Management or IT Audit
• Exposure to Cloud Security, Data Protection, and Privacy-related risks
• Experience in ISO22301 implementation and audits
• Strong documentation, reporting, and presentation skills
• Hands-on with Information Risk Management and Infrastructure/Application Security

Preferred Certifications:

• Security:

  CISSP, CISA, CISM, CEH, ISO27001

• Business Continuity:

  CBCI, CBCP, ISO22301 LI/LA
• Offensive Security Certified Professional (OSCP) is a plus