Third Party Risk Management (TPRM)

You will be responsible for conducting ISMS or Third-Party Risk Assessments. Your role will involve effectively liaising with clients and managing stakeholder expectations. Additionally, you will work closely with client teams from various departments, such as compliance teams, auditing, and regulators, to identify and document various requirements and obligations. Your duties will include conducting risk assessments and audits related to people, processes, and technology. You will be tasked with identifying gaps, observations, risks, opportunities, and areas for improvement in policies, processes, procedures, and standards. You will also document information security risks, recommendations, and compensating controls in assessment and audit reports. Collaboration with other members of the engagement team will be essential to plan and develop relevant work papers and deliverables for vendor information security reviews. You will define the approach for vendor assessments and develop a vendor evaluation model. Furthermore, you will be responsible for handling key activities throughout the assessment and audit life cycle, including planning, execution, reporting, quality review, and tracking within the Third-Party Risk Management (TPRM) framework. As part of your role, you will provide guidance, share knowledge with team members, and participate in performing procedures, focusing on complex, judgmental, and specialized issues. You will also prepare detailed risk assessment reports that include findings and actionable recommendations for stakeholders and senior management.,