88 Tprm Jobs - Page 2

This role will be responsible for supporting the Third-Party Technology Risk Management team in identifying and evaluating potential/ recognized risks related to Information Security, Business Continuity and Physical Security. The 3rd Party Security Risk Assessor, reporting to the Manager, Third Party Risk Management team that performs security assessments of vendors, service providers and 3rd party companies that manage systems or information for BNP Paribas Responsibilities Direct Responsibilities As a Third-Party Technology Risk Assessor, you will perform third-party information and cyber security assessment to identify, monitor, remediate, and manage third party risks across the third-party lifecycle. Risk Assessor role requires good risk experience technology expertise (areas of information and cyber security, business continuity, incident management, compliance, and human resource security) in accurately scoring the inherent risk profile of 3rd parties, making sure the risk assessments are completed on time with quality. In addition, the role requires the ability to prioritize and drive workload. Evaluating control effectiveness and review evidence of controls by applying audit, compliance, security, and regulatory framework knowledge and experience, including, but not limited to review of: ISO 27001, SIG (Shared Assessments), TruSight, SOC / equivalent reports, as well as knowledge of controls related to Privacy, Compliance, Business Resiliency, Cyber and other risk domains. Work with Line of business partners, by navigating them through the different stages of the risk assessment life cycle and making sure that they are being compliant to the organization requirements. Communicate assessment findings and recommendations to internal stakeholders, including senior management, legal, and compliance teams as applicable. Monitor and track the identified findings as part of the assessment lifecycle. Contributing Responsibilities Actively participate in identifying process gap and should be ready to own and update/ document relevant TPTRM policies and procedures Support Internal and external TPTRM audit requirements Compile and generate Weekly/Monthly/Quarterly dashboard on KPI Technical Behavioral Competencies Ideally in financial services with minimum of 5+ years of experience in TPRM or Risk management background. Bachelor's degree with professional certification in Information, Cyber, Network and Cloud Security. Experience with industry recognized standards for IT security controls and best practices like NIST, ISO27001, PCI DSS, COBIT, SOC 2 etc. Experience in one or more risk disciplines an advantage i.e., Information Security, Business Continuity, Data Privacy etc. Experience in Governance, Risk Compliance (GRC) tools an advantage. Experience in providing stakeholders with specialist risk knowledge and monitoring its execution. Strong self-motivated multi-tasker who can prioritize competing tasks and stakeholders. Ability to work independently in a fast adapting and agile work environment. Proactive and deliverable focused, with a dedication to delivering against hard deadlines. Excellent analysis skills with keen eye for detail. Strong capabilities in Microsoft Excel, PowerPoint, and Word. Familiarity with vendor management, procurement, and contract negotiation. Ability to communicate effectively with both technical and non-technical stakeholders. Strong analytical and problem-solving skills. Specific Qualifications (if required) Skills Referential Behavioural Skills : (Please select up to 4 skills) Ability to collaborate / Teamwork Communication skills - oral written Attention to detail / rigor Creativity Innovation / Problem solving Transversal Skills: Ability to develop and adapt a process Ability to understand, explain and support change Ability to develop others improve their skills Education Level: Bachelor Degree or equivalent Experience Level At least 5 years

KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term. Role detail 4 to 8 years of experience in vendor/ supplier/ third party risk assessment Expertise in IT internal audit, Information Security/cybersecurity, IT SOX, Third Part Risk Assessment Reporting e.g., SOC1, SOC 2. Relevant expertise on CSA STAR requirements, ISO control, NIST Standards, PCI DSS and GDPR requirements. Experience in performing control testing, IT / infosec risk assessments. Knowledge of technical domains such as cloud security and application security. Certification: CISA, CISSP, CEH, ISO, PCI DSS, NIST.

Role: Operational Risk Experience: 3-10 years Location: Mumbai Experience of working in Operational Risk Management function of the Bank or part of GRC / Risk Advisory practice of Big 4 & Tier I Consulting Firms conducting Operational Risk reviews for Domestic Banks & NBFCs Experience in Banking Products & Process and Operational Risk practices Experience in conducting Risk Assessment and Control Testing of Banking processes such Finance / Retail Lending / Retail Liability / Transaction Banking / Branch Banking Processes / KYC & AML etc Well conversant with RBI guidelines on Operational Risk / TPRM / BCP etc. Excellent Communication Skills and ability to multi-task,

Job Title: Vendor Management Specialist Internal Third-Party Management (Private Bank Divisional Vendor Management Office) Location: Jaipur , India Corporate Title: Associate Role Description Today, markets face a whole new set of pressures – but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change. Join us at DB, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment. We’re looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow. In return, we’ll give you the support and platform to develop new skills, make an impact and work alongside some of the industry’s greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career. Team / division overview The Private Bank Divisional Vendor Management Office (PB DVMO) is responsible for implementing the core requirements of the Third-Party Management Framework and thus for an efficient and effective management of Private Banks third-party portfolio. The DVMO collaborates with Private Banks global business stakeholders and its COOs and other group functions to appropriately challenge, execute and manage business requirements in full compliance with internal / external policies and standards. What we’ll offer you As part of our flexible scheme, here are just some of the benefits that you’ll enjoy: Best in class leave policy Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Employee Assistance Program for you and your family members Comprehensive Hospitalization Insurance for you and your dependents Accident and Term life Insurance Complementary Health screening for 35 yrs. and above Your key responsibilities As a part of the team “Internal Third-Party Management” you will: Consult and work together with different stakeholders in vendor management topics Support contract management activities, like regular contract reviews and updates of Deutsche Banks contract management system (dbContracts) Support financials and allocations activities for German intragroup third-parties, like review of financials and internal allocations, regular reporting of such financials Support access rights approvals, reviews and recertification for internal third-parties Support development, execution and maintenance of a future model for Private Bankss internal third-parties management and support the implementation and maintenance of an internal third-party repository for Private Bank Depending on skill level, support Service Owners or Engagement Leads and/act as their back-up in the vendor risk management process in line with relevant policies and procedures Support all post-deal activities like Risk Reviews, Post-Go Live Controls (PGTC), change requests, etc. Prepare impactful analysis, meeting materials or presentations as required to facilitate senior stakeholder engagement and management approvals Your skills and experience Vendor management experience gained within a global corporate, financial services or management consulting environment Experienced in risk management systems, tools and processes, ideally in the Deutsche Bank environment Experienced in contract management / governance, solid understanding of contract creation and intragroup financials and allocations Strong team player, with proven ability to work in a global team and drive results both collaboratively and independently Strong analytical, communication and interpersonal skills Educated to degree level or with relevant industry experience, especially regarding Risk- and/or Supply-Chain Management Business fluent in written and spoken English, German language skills helpful but not mandatory Very good computing skills, e.g. Microsoft Office suite (Word, PowerPoint and Excel) How we’ll support you Training and development to help you to succeed in your career Flexible working to assist you balance your personal priorities Coaching and support from experts in your team A culture of continuous learning to aid progression A range of flexible benefits that you can tailor to suit your needs About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm

New requirement - JD for Cybersecurity risk manager: Key responsibilities As a Cyber Risk & compliance Professional in our Group CISO office, you will be occupied in the following domainsa) Risk management b) Compliance.This role is responsible for planning, managing and coordinating various cybersecurity risk management activities focused on identifying, assessing, and mitigating risks for the enterprise from a business perspective. Skill requirement: Degree, or equivalent, in Information Security or Cyber Security or Computer science or similar course Self-motivation to continuously develop in the areas of cybersecurity Ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience Cyber / technology risk assessments & management methodologies Hands on with assessment report preparation and presenting to senior technical and business stakeholders Articulative and confident in presentation to senior stakeholders Knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Advanced knowledge and understanding of ITGC, NIST 800-53, NIST CSF controls and Risk management frameworks Expertise in complex business processes and technological risks Deep understanding of security technologies including firewalls, proxies, SIEM, XDR, CSPM, IGA, PAM, Data protection Experience8 12 years. Applications from people with disabilities are explicitly welcome.

Role Summary: The ServiceNow Business Analyst for TPRM acts as the bridge between stakeholders and technical teams. This role involves gathering requirements, mapping processes, preparing user stories, and ensuring successful configuration of TPRM workflows on the ServiceNow platform. Strong communication and domain knowledge in third-party risk are essential. Required Certifications: ServiceNow Certified System Administrator (CSA) Key Responsibilities: 1. Gather and document functional requirements for ServiceNow TPRM implementations. 2. Translate business processes into user stories and technical specs. 3. Coordinate with stakeholders for TPRM use cases and workflows. 4. Conduct stakeholder interviews, gap analysis, and system demos. 5. Create process maps and documentation for existing/new features. 6. Validate TPRM workflows, scoring logic, and vendor lifecycle steps. 7. Support user acceptance testing (UAT) and defect management. 8. Provide end-user training and system walkthroughs. 9. Collaborate with developers for sprint planning and backlog grooming. 10. Act as liaison between governance, risk, procurement, and IT teams. Mandatory Skills: ServiceNow SecOps. Experience5-8 Years.

Hiring Requirements: • Experience: 35 years of hands-on experience in Information Security or a related field. • Certifications: ISO 27001 or ISACA certifications (such as CISA, CISM) preferred. Skills: • Excellent verbal and written communication skills. • Strong professional attitude and collaborative mindset. Knowledge: • Familiarity with Third Party Risk Management (TPRM) processes. • Understanding of IT/security-related contracting is a plus.

Role & responsibilities 2 years of experience in assurance, information security, vendor/ supplier/ third party risk assessment Expertise in cyber security including standards such as ISO27001, PCI-DSS, ISO22301, privacy etc. Knowledge of technical domains such as network security, cloud security, application security, control testing Knowledge of concepts such as vendor risk profiling, country risk assessment, outsourcing/ technology regulations Experience in assessing emerging technologies such as robotics, IOT, DLT, Social, Mobile etc., Exposure to TPRM specific regulations (FED, MAS, OCC, etc.), Exposure in assessing different third parties e.g. Brokers, Exchanges, etc., Worked with TPRM tools, platforms & utilities such as KY3P, TruSight, ServiceNow, OneTrust, CyberGRX, Coupa etc, Strong Auditing skills is desired, experience in IT Compliance, ITGC testing, and Assurance is a plus Strong problem solving and logical approach skills Excellent written and verbal communication skills Consistent display of technical proficiency Ability to work well in teams Willingness to travel within India or abroad for project/assignments. Demonstrate integrity, values, principles, and work ethic and lead by example CISA/ CISSP/ CISM/ISO27001 LA / LI / Cloud security certificates Prior exp in IT Audit, SOC 1, SOC 2 Qualifications: Bachelors degree in computer science or related field Excellent communication and team collaboration skills

5 years of exp in Service Now (Service New TPRM Module, GRC, IRM)- in combination if possible; Secops, (ITOM, CMDB, Service Mapping)- combination if possible Secondary Skill Microsoft office, Microsoft Project Interested candidates can share the profile to swathi.mba1085@gmail.com

Greetings from Northern Trust! We want to approach you for an exciting vacancy of Sr. Associate/Lead, Cyber Sec Risk Mgmt position with Northern Trust for Pune location. Your profile seems to be matching the requirement. Please find below the job details for your reference Job Role: Sr. Associate/Lead, Cyber Sec Risk Mgmt Job Location: Pune Experience: 7+ years Skills: IT Audit, IT Risk Mgmt, SOC Reports, NIST Frameworks, TPRM Job Description: Responsibilities: Perform information security risk assessment processes for new and existing Northern Trusts third parties business partners. Demonstrate some proven knowledge on some of the following domains: Information Security Governance and Risk Management Access Control Vulnerability and Penetration Network Security Application Security Cryptography Security Architecture and Design Operations Security Business Continuity and Disaster Recovery Planning Legal, Regulations, Investigations and Compliance Physical and Environmental Security Cloud Security Perform assessment of IT controls operation, identifying, gaps, risks and areas for improvement. Report writing skills. Knowledge on regulations related to banking and compliance Should be well versed with contract language, analysis and negotiation process. Responsible for reviewing master services contracts of the third parties to identify information technology and security related clauses. Responsible for working with procurement teams to formulate/renew the contracts as per the information security team guidelines. Responsible for documenting, and reporting to management, all findings from risk assessment processes. Collaborate with internal stakeholders & functional teams to ensure that all identified risks within each third party are assigned to business owners and tracked for timely closure. Able to interact in a professional manner and develop relationships with individuals and teams at any level in Northern Trust. Foster a positive and collaborative environment. Demonstrate ability to work well in both an individual contributor and team capacity. Rapidly and effectively adapt to a highly dynamic and fast-paced work environment. Skills Preferred: Excellent written and verbal communication skills. Able to converse and develop business relationships with individuals and teams at any level within Northern Trust. Knowledge of IT Security Domains / Frameworks (e.g., NIST, ISO27001). Knowledge of Compliance regulations. Understanding of IT Audit process. In-depth understanding of information security, risk assessments, security risk management principles. Principle understanding of Technology controls relating to Application and system vulnerabilities Advanced experience with MS Office, SharePoint, and Reporting tools Ability to develop visual representations of processes and risks to support executive updates. We want to take it ahead for further screening and interview rounds. Please respond back at the earliest to move your candidature ahead. Regards, Northern Trust Talent Acquisition Team

Role-TPRM Location- Bangalore/Mumbai OVERVIEW KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993. Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, and Vadodara. KPMG in India offers services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused, and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment. KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term. Role detail 4 to 8 years of experience in assurance, information security, vendor/ supplier/ third party risk assessment Expertise in cyber security including standards such as ISO27001, PCI-DSS, ISO22301, privacy etc. Knowledge of technical domains such as network security, cloud security, application security, control testing Knowledge of concepts such as vendor risk profiling, country risk assessment, outsourcing/ technology regulations Experience in assessing emerging technologies such as robotics, IOT, DLT, Social, Mobile etc., Exposure to TPRM specific regulations (FED, MAS, OCC, etc.), Exposure in assessing different third parties e.g. Brokers, Exchanges, etc., Worked with TPRM tools, platforms & utilities such as KY3P, TruSight, ServiceNow, OneTrust, CyberGRX, Coupa etc, Strong Auditing skills is desired, experience in IT Compliance, ITGC testing, and Assurance is a plus Strong problem solving and logical approach skills Excellent written and verbal communication skills Consistent display of technical proficiency Ability to work well in teams Willingness to travel within India or abroad for project/assignments. Demonstrate integrity, values, principles, and work ethic and lead by example CISA/ CISSP/ CISM/ISO27001 LA / LI / Cloud security certificates Prior exp in IT Audit, SOC 1, SOC 2 Qualifications: Bachelors degree in computer science or related field Excellent communication and team collaboration skills Selection Process Candidates should expect 2-3 rounds of personal or telephonic interviews to assess fitment and communication skills. Equal employment opportunity information KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

: Job TitleTPRM - Process Unity Specialist, AS LocationPune, India Role Description Process Unity Application expert for the design and development within Process Unity and its integration with different applications supporting software to meet TPRM business requirements. What well offer you 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Accident and Term life Insurance Your key responsibilities Must have good knowledge of TPRM process i.e., process from sourcing/screening till the Exit plan. ProcessUnity Application functional expert should coordinate the design and development with in ProcessUnity and its integration with different applications supporting software to meet business requirement. SQL & Configuration expert having knowledge to write query for Changes build in TPRM application Support Operational Readiness Records for maintaining the regulatory compliance & Audit Assessments and Control function for Third party risk management process containing standard/high risk to low-risk process. Proven experience in overseeing Change Management processes with planning, testing, implementing changes ensuring seamless transitions. Develop and maintain comprehensive documentation on Change Management/Incident Management/Audit /Process Frameworks/ RCA etc. with clear framework reducing ambiguity and enhance team efficiency. Handle system administrator role, working on Service Requests and Jira changes. Utilize incident data to root causes and pattern, driving continuous improvement in process and application stability. Integration between different applications and maintenance of architecture layouts. Strong Stakeholder relationship as acting a layer between core IT integration and business to meet expected requirements. Maintain transparent and open lines of communication with stakeholders keeping informed about project progress, changes, and potential risk. Support the collection, analysis and production metrics on process data for KPIs to find out improvements. Your skills and experience Overall, 6-9 years of experience 3+ years experience on ProcesUnity Development How well support you About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm

ServiceNow Business Analyst TPRM Experience: 39 Years Work Location: PAN India Role Summary: The ServiceNow Business Analyst for TPRM acts as the bridge between stakeholders and technical teams. This role involves gathering requirements, mapping processes, preparing user stories, and ensuring successful configuration of TPRM workflows on the ServiceNow platform. Strong communication and domain knowledge in third-party risk are essential. Required Certifications: ServiceNow Certified System Administrator (CSA)

Work location: PAN India ServiceNow Developer TPRM Experience: (6-9 Years) Role Summary: A mid-level ServiceNow developer focusing on implementing and customizing the TPRM module. Responsibilities include developing custom scripts, configuring forms, workflows, and integrating the TPRM application with risk scoring mechanisms, all while supporting agile delivery ServiceNow Developer TPRM Experience: 3–6 Years Role Summary: This junior-to-mid-level role involves development and support for ServiceNow’s TPRM module. The developer will work on workflows, scripting, assessments, and UI configurations to support third-party risk operations within an enterprise risk management framework. Required Certifications: ServiceNow Certified System Administrator (CSA) ServiceNow Certified Application Developer (CAD) – Optional ServiceNow Certified Third-Party Risk Management Implementer – Preferred

ServiceNow TPRM Architect Experience: 10+ Years Work Location: PAN India Role Summary: The ServiceNow TPRM Architect leads the design and implementation of complex Third-Party Risk Management (TPRM) and Integrated Risk Management (IRM) solutions on the ServiceNow platform. This senior-level role involves deep architectural design, integration planning, performance tuning, and guiding development teams. Ideal for professionals with extensive technical and functional experience in risk domains. Required Certifications: ServiceNow Certified Third-Party Risk Management Implementer ServiceNow Certified System Administrator (CSA) ServiceNow Certified Application Developer (CAD)

Skills Required: Primary: Service New TPRM Module, GRC, IRM) Secondary: ITOM, CMDB, Service Mapping

In Scope of Position based Promotions (INTERNAL only) Job Title: TPM External Engagement Manager Location: Pune, India Corporate Title: VP Role Description Third Party Management (TPM), part of Deutsche Banks Global Procurement function, is responsible for the processes that manage risks related to the engagement of third party vendors and outsourcing. TPM has been through a large-scale transformation program to change the approach, process and technology used for the vendor risk management process. In parallel, there has been a significant increase from regulators and auditors on vendor risk and the way in which it is managed within DB. Your key responsibilities Given the increased focus on vendor risk and the establishment of a Regulatory Engagement team within TPM, additional support is required to drive and co-ordinate a range of activities, falling into three main areas, Regulatory Analysis, Operational Management, and Content Production: Regulatory Analysis Advisory Build and drive: Create and maintain and up to date analysis of DBs compliance against Third Party Regulations Run the Regulatory Governance Forum, a governance meeting across first and second lines of defence (Global Procurement, TPRM, Legal, Compliance), which includes the below activities: Track the progress of new regulations against the banks Regulatory Compliance Management processes including: Understanding the key owners for each stage of in flight regulations Track and report the progress Escalate report risks and issues via the Regulatory Governance Forum Create Points of View papers for internal audiences for new and emerging regulations and consultation papers Operational Management: Be the primary contact for TPM issues for Asia Pacific region (and other regions as necessary), including all regulatory requests, Outsourcing governance forums and BAU questions. Relay feedback from APAC region into relevant global governance forums, to drive improved outcomes for DBs third party risk management approach Track and report on progress of Management of a communications plan to implement External Engagement activities Contributing to the development of processes to deliver effective management of Regulatory requests from regional, business and Regulatory Management Group Office stakeholders. Development and production of a reporting framework for Regulatory engagement. Creation and management of a repository of Regulatory engagement, peer benchmarking and external communication activity. Development and maintenance of a KOD to document External Engagement procedures. Developing strong relationships with key internal regulatory external audit facing functions Content Production: Responding to business and RTC requests for information to support regulatory audit responses regarding TPM VRM processes, providing high quality content to protect and enhance the reputation of the Banks third party risk management activities. Sourcing and developing credible content to support regulatory engagements, senior management communications and ongoing business and regulatory requests. Work closely with the External Engagement Lead and other stakeholders to agree and implement regular MI to support the TPM story to regulators. Develop deep functional understand of the Third Party Risk Management process and associated platform Functionality This role reports directly to the Lead, TPM External Engagement. Your skills and experience Deep understanding of key global third party regulations (MaRisk, EBA Outsourcing Guidelines, Interagency Guidance, PRA SS1/21, PRA SS2/21, DORA, MAS, HKMA, etc) Ability to influence and build collaborative relationships with a broad range of stakeholders Understanding of the third party risk management process Strong project management and organisational skills Ability to develop and deliver credible content Strong communication skills Self-starter, with the ability to work autonomously and drive engagement Strong attention to detail Ability to challenge the current operating environment Ability to identifying innovative value added solutions

Position Overview: We are seeking a highly experienced and strategic Third-Party Risk Management (TPRM) professional to lead and enhance our enterprise-wide third-party risk program. This role involves overseeing risk assessments, governance, due diligence, monitoring, and issue management for vendors, partners, and service providers across the organization. The ideal candidate will bring 10–12 years of expertise in risk management, information security, compliance, and vendor oversight, with the ability to collaborate across legal, procurement, technology, and business functions to ensure consistent application of third-party risk controls. Roles and Responsibilities Key Responsibilities: Lead the execution and continuous improvement of the Third-Party Risk Management lifecycle, including on boarding assessments, ongoing monitoring, risk reviews, and exit management. Oversee the development and implementation of TPRM policies, frameworks, and procedures, aligned with regulatory standards such as NIST, ISO 27001, SOC 2, GDPR, DORA, and PCI DSS. Conduct and review inherent and residual risk assessments for new and existing vendors across multiple risk domains (information security, compliance, financial, operational, etc.). Collaborate with procurement, legal, IT, business units, and compliance teams to integrate TPRM into sourcing and contract processes. Drive the automation and scalability of the TPRM program through use of GRC platforms (e.g., ServiceNow, Archer, ProcessUnity, OneTrust). Manage third-party due diligence questionnaires (DDQs), control gap analysis, and track remediation efforts for identified issues. Prepare and deliver executive-level reporting and dashboards related to vendor risk posture, risk acceptance, and compliance status. Stay current on emerging regulatory requirements, supply chain risks, and third-party threats to inform program strategy. Support internal/external audits and regulatory reviews involving vendor risk management. Required Qualifications: 10–12 years of professional experience in Third-Party Risk Management, IT Risk, InfoSec, Audit, or related GRC functions. In-depth understanding of third-party risk domains, including cybersecurity, data privacy, business continuity, and compliance. Experience developing or managing TPRM frameworks and governance structures across global enterprises. Hands-on experience with TPRM tools such as ServiceNow GRC, Archer, OneTrust, Prevalent, or ProcessUnity. Strong knowledge of risk and control frameworks including NIST, ISO 27001, SIG, SOC 2, and GDPR. Proven ability to assess and report on third-party risk posture, remediation plans, and contract compliance. Excellent written and verbal communication skills with ability to influence technical and non-technical audiences. Preferred Qualifications: Relevant certifications such as CISA, CRISC, CISSP, CTPRA, CTPRP, or ISO 27001 Lead Auditor. Experience in regulated industries such as financial services, healthcare, or critical infrastructure.

: Job Title - Engineer Process Unity Consultant, AS Location - Pune, India Role Description This role offers a unique opportunity to be part of a high performing team implementing a strategic future state technology landscape for all of DWS Corporate Functions globally. An Engineer is responsible for designing, developing and delivering significant components of engineering solutions to accomplish business goals efficiently and reliably. Key responsibilities of this role include active participation in the design of their solution components, investigating re-use, ensuring that solutions are fit for purpose, reliable, maintainable, and can be integrated successfully into the overall solution and environment with clear, robust and well tested deployments. Engineers actively look for opportunities to improve the availability and performance of components by applying the learning from monitoring and observation, automating towards zero touch, and championing a 'DevOps' mind-set. What well offer you 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Accident and Term life Insurance Your key responsibilities Individual contributor role for developments in ProcessUnity application Thorough understanding on ProcessUnity Third Party Risk Management (TPRM) architecture Exposure to data integration architecture and data transfer method between ProcessUnity and other data provider applications Understand business requirement and perform high level and low level estimation with technical solution approach Build and deliver projects as per the estimates Should have experience in Design and development in implementation projects Own technical delivery of individual components, working with Architects, Business Analysts etc. Driving continuous improvement and a high performance agile culture Ensure high quality standards by getting it right the first time. Your skills and experience 6+ years of experience in configuration and customization in ProcessUnity Strong knowledge on TPRM functionality Good communication and team player Working experience on data integration with ProcessUnity and other TPRM related applications Rigorous, resourceful, adaptable with good attention to detail and strong project ownership Strong configuration management skills How well support you About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm

We have Immediate Openings on Third Party Risk Management (TPRM) for Contract to Hire role for multiple clients. Job Details Skills Third Party Risk Management (TPRM) Experience 5+Years Job Description : Third Party Risk Management Job Description: Conduct third party risk assessments in alignment with company security policies and industry standards Perform on site assessments of vendors to identify opportunities for improvement Provide input and aid in the development of policies focused on the security of third party business processes Foster relationships and influence the behavior internal teams and external parties Develop and maintain supplier risk and control monitoring plans, performing monitor activities and analysis of evidence to determine controls are operating effectively Complete monitor and control tasks triggered by supplier Tier and Third Party Interaction Model Collaborate with the line of business stakeholders to deliver year over year cost savings with managed third party relationships Assist in development and execution of category/supplier strategies Partner with internal budget owners to deliver against operating or marketing budgets Partner with appropriate stakeholders on contract negotiations for all managed third party relationships Qualifications for third party risk management: Minimum 4 years of experience developing and maintaining global vendor risk management programs CISSP, CISM, CISA, or CRISC certification preferred Solid understanding of information technology and security solutions Responsible for proper invoice review, reconciliation, and payment Monitor and ensure successful delivery against third party contractual obligations Assist in development of, and monitor, SLA's or key performance indicators for third party relationships

Role: Risk Associate Location: Chennai Experience: 3+ years Responsibilities Include: Direct Responsibilities Prepare meeting decks. Producing KPIs using Power-BI tool. Co-ordination for with Paris/central project managers and ISPL TPRM (Third party risk management) or Central TPRM team to ensure required data availability for reporting. Facilitate with all stake holders for prepare committee meetings. Contributing Responsibilities: Support on DORA KPI / SLA topics with Project Managers & stake holders Interested candidates can reach me through "srilekha.g@twsol.com"

Hello Connections!!! Greetings From Teamware Solutions We are #Hiring for Top Investment Banking. Position: Associate Location: Chennai Years of experience required: 2 to 5 years Notice Period: Immediate to 15 days Must have Skills: Risk Management, Power Bi, Dashboard & TPRM Direct Responsibilities: -Prepare meeting decks. -Producing KPIs using Power-BI tool. -Co-ordination for with Paris/central project managers and ISPL TPRM (Third party risk management) or Central TPRM team to ensure required data availability for reporting. -Facilitate with all stake holders for prepare committee meetings. Interested candidates can send their resumes to ramizun.s@twsol.com.

4+ years Information Security Governance, Compliance and Security Assessment, experience, with a focus on IT and IS Risk Assessments and program reviews / establishment. Familiarity with and demonstrated experience assessing against the BS ISO/IEC/SIG 27002:2005 BS 7799 standard domains, BS 25999 including Risk Assessment; Security policy; Organization of Information Security; Asset Management; HR Security; Physical and Environmental Security; Communications and Operations Management; Access Control; IS Acquisition, Development and Maintenance; IS Incident Management; Business Continuity Management; and Compliance. Broad understanding of Information Security trends, services and disciplines and experience applying them in dynamic environments. Please reach out to me by below Mail id/ Mobile number:- shiva.c@twsol.com / 8247636421

Skill - ServiceNow with GRC experience : GRC or IRM module Exp- 6 - 9 yrs Work model - Hybrid Mode ( 2 Days work from Office) Work location: Hyderabad/ Bengaluru/Pune/Mumbai/Chennai/Kolkata/Gurgaon Experience: Minimum of 7-10 years of experience in implementing GRC solutions and/or in ServiceNow/Archer/Aravo/OneTrust or cyber strategy. Well versed with at least 1 GRC tool such as ServiceNow/Archer/Aravo/OneTrust. Gathering and documenting business requirements and identifying gaps within existing systems and processes. Hands-on experience on at least 2 GRC modules (ERM, ITRM, TPRM, SecOps, Issues Management, Policy & Compliance Management, etc.). Hands-on experience in on-demand and out-of-the-box solution developments, access control, rules & events, notifications, data integrations, UI, reports and dashboards, workflows and other administrative activities in tools like ServiceNow/Archer/Aravo/OneTrust. Experience on Privacy Enhancement and Automation tools such as OneTrust. Proficient in risk management processes and compliance regulations. Proven experience in GRC, particularly within a consulting environment. Proficiency with scripting language in implementing API integrations with external system Must have development experience in more than 2- 3 projects from scratch to till go-live Strong understanding of GRC frameworks such as COBIT, ISO 27001, NIST, etc. Strong analytical and problem-solving skills. Excellent interpersonal and communication skills, capable of working effectively with clients and team members. Flexibility in work hours may be necessary to meet project deadlines and client needs If interested, share your profile on alisha.k@anlage.co.in Thanks & Regards Alisha

Role & responsibilities Candidate will be responsible for the following activities: Prepare meeting decks. Producing KPIs using Power-BI tool. Co-ordination for with Paris/central project managers and ISPL TPRM (Third party risk management) or Central TPRM team to ensure required data availability for reporting. Facilitate with all stake holders for prepare committee meetings Direct Responsibilities Prepare meeting decks. Producing KPIs using Power-BI tool. Co-ordination for with Paris/central project managers and ISPL TPRM (Third party risk management) or Central TPRM team to ensure required data availability for reporting. Facilitate with all stake holders for prepare committee meetings. Contributing Responsibilities: Support on DORA KPI / SLA topics with Project Managers & stake holders Preferred candidate profile Perks and benefits