TPRM Consultant - Cyber

Job Title

Location

Experience

Shift Timing

Employment Type

Job Summary

Consultant and Senior Consultant

Key Responsibilities

• Conduct third-party/vendor risk assessments focusing on cybersecurity, operational, and regulatory risk.
• Review vendor documentation such as risk questionnaires, ISO 27001 certificates, SOC1/SOC2 reports, penetration test results, etc.
• Identify and assess potential risks, and provide recommendations for mitigation and remediation.
• Collaborate with internal teams and external vendors to track and close risk findings.
• Ensure documentation and risk scoring is accurate and aligned with internal frameworks and policies.
• Leverage TPRM tools or platforms (e.g., Archer, ProcessUnity, OneTrust) for risk assessment and reporting.
• Stay updated with relevant regulatory frameworks and emerging risks in third-party ecosystems.

Requirements

• Minimum 2 years

  of experience in

  Third Party Risk Management

  ,

  GRC

  ,

  Information Security

  , or related domains.
• Strong understanding of industry standards such as

  ISO 27001

  ,

  NIST

  ,

  SOC2

  , and regulatory frameworks (e.g.,

  GDPR

  ,

  HIPAA

  ).
• Good communication and stakeholder management skills.
• Familiarity with risk assessment tools and TPRM platforms is an advantage.
• Relevant certifications such as

  CISA

  ,

  CRISC

  ,

  ISO 27001 LA/LI

  , or

  CISSP

  (preferred but not mandatory).
• Willingness to work from the office in

  Mumbai

  or

  Bangalore

  .

What We Offer

• Opportunity to work on

  high-impact projects

  with global clients
• Supportive work culture focused on learning and growth
• Competitive salary and benefits
• Exposure to a wide range of

  cybersecurity and risk domains