TPRM and GRC Technology

Taks to Perform

1. Understanding the vendor and their services offered to Client .
2. Validating the vendor based on the assessment criteria and “Information Security Agreement” to find the periodicity of assessment.
3. Scheduling a kick-off call with the vendor and the engagement owner to start the assessment.
4. Creating an assessment in “OneTrust” tool and assigning it to the vendor POC.
5. Validating the answers filled by the vendor POC with the evidence provided by vendor.
6. Identify the risks and write the risk report.
7. Present the report to the management and get acknowledged by the engagement owner.
8. Remediate the risks identified .

Skills required:

1. ISO 27001, ISO 31000, NIST, PCI DSS, HITRUST, HIPAA, GDPR knowledge
2. Risk Management knowledge
3. Threat intelligence knowledge
4. Governance, Risk and Compliance
5. Knowledge on regulatory and legal compliance

Strong technical knowledge to understand the latest technologies used

GRC Technology-APG

Key Responsibilities:

• Design and develop API proxies, flows, and policies using Google Apigee.
• Implement OAuth 2.0, JWT, API Key, and security best practices for APIs.
• Optimize API performance and manage traffic, caching, and quotas.
• Automate deployments via CI/CD pipelines and scripting.
• Collaborate with cloud, security, and application teams to deliver scalable API solutions.

Required Skills:

• 5–10 years of experience in API development and management.
• Strong hands-on experience in Google Apigee (Edge / X / Hybrid).
• Proficiency in API design (REST, OpenAPI), JavaScript, and Java.
• Expertise in API security (OAuth, JWT, mTLS) and API governance.
• Knowledge of CI/CD, Git, Kubernetes, Docker, and GCP.

Soft Skills:

· Excellent problem-solving and debugging Skills

· Ability to work in agile teams and communicate with stakeholders effectively