Third-Party Risk Management (TPRM) Analyst

Job Title

Company : CyberAssure--

Years of Experience: 2-3 years+

Location: Sohna road , sector 49, Gurgaon

Package: 7-9 lacs

Summary:

Third-Party Risk Management (TPRM) Analyst

Key Responsibilities:

Third-Party Risk Assessments:

-Conduct thorough assessments of potential and existing third-party vendors to evaluate their security controls, data protection practices, and overall risk posture.

-Collaborate with various stakeholders to gather relevant information and assess the impact of third-party relationships on the organisation.

Risk Identification and Analysis:

-Identify and analyse potential risks associated with third-party relationships, considering factors such as cybersecurity, data privacy, compliance, and business continuity.

-Evaluate the inherent and residual risks and communicate findings to relevant stakeholders.

Compliance Management:

-Ensure third-party vendors comply with industry regulations, legal requirements, and organisational policies.

-Stay updated on relevant regulatory changes and communicate the impact on third-party risk management processes.

Policy Development and Implementation:

-Contribute to the development and enhancement of third-party risk management policies and procedures.

-Implement and enforce risk management frameworks to ensure consistent and effective risk assessments.

Monitoring and Reporting:

-Establish and maintain ongoing monitoring mechanisms for third-party relationships.

-Generate and provide regular reports on the status of third-party risks, key performance indicators, and mitigation efforts.

Vendor Due Diligence:

-Conduct due diligence activities, including vendor background checks, financial assessments, and evaluation of their security and privacy practices.

-Collaborate with legal and procurement teams to ensure that contractual agreements include necessary security and compliance clauses.

7. Collaboration and Communication:

-Collaborate with internal stakeholders, including IT, legal, compliance, and procurement teams, to ensure a comprehensive approach to third-party risk management.

-Communicate effectively with third-party vendors to address and resolve identified risks.

Qualifications and Skills:

Bachelor's degree in a related field (e.g., Information Security, Risk Management, Business Administration).

-Certification in relevant areas, such as ISO27001, will be preferred.

-Knowledge of third-party risk management frameworks, industry standards, and regulatory requirements.

-Strong analytical and problem-solving skills with attention to detail.

-Excellent communication and interpersonal skills.

-Experience with vendor risk management platforms is a plus.

-Ability to work independently and collaboratively in a team environment.

Experience:

• Experience in TPRM- should be a minimum of 2 years

• Experience in Cybersecurity- minimum of 2 years

• Certification in the relevant area desired (Like ISO 27001 lead auditor, etc)

Share Ur latest CV with details like-

1. Ctc

2. Expectation

3. Notice period

Regards,

Rajesh Kumar

AAYAM CONSULTANTS

Cell: - 9311232179/ 7011595674

Email id: - [HIDDEN TEXT]