TPRM Manager - Cyber

Job Title:

Location:

Experience Required:

Role Overview

TPRM Manager

Key Responsibilities

• Lead and manage the

  Third Party Risk Management (TPRM)

  process, including vendor onboarding, due diligence, monitoring, and offboarding.
• Conduct

  risk assessments

  on third parties across security, privacy, compliance, and operational domains.
• Collaborate with internal stakeholders (IT Security, Legal, Compliance, Procurement, and Business Units) to ensure third parties meet organizational standards.
• Review and interpret

  data privacy regulations (GDPR, DPDP Act, etc.)

  to evaluate vendor compliance.
• Track, report, and remediate third-party risks through risk registers and dashboards.
• Support the development and implementation of

  TPRM policies, frameworks, and playbooks

  .
• Manage

  audit and compliance activities

  related to third-party vendors.
• Provide subject matter expertise in

  cybersecurity, risk, and privacy

  to improve vendor governance.

Qualifications & Skills

• Bachelor’s degree in Information Technology, Computer Science, Risk Management, or related field.
• Minimum

  6+ years of experience

  in Third Party Risk Management, Vendor Risk, Information Security, or related fields.
• Exposure to

  Data Privacy frameworks

  (GDPR, DPDP Act, HIPAA, or equivalent).
• Strong understanding of

  ISO 27001, NIST, SOC 2, PCI DSS

  frameworks.
• Certifications preferred:

  CISA, CISSP, CISM

  (any one or more).
• Strong analytical and problem-solving skills with the ability to manage multiple stakeholders.
• Excellent communication, reporting, and vendor management skills.

Good to Have

• Experience in risk consulting, BFSI, or IT/ITES industries.
• Hands-on experience with

  GRC platforms

  (e.g., Archer, ServiceNow, OneTrust, MetricStream).
• Familiarity with contract reviews and data protection clauses.