TPRM Consultant

Job Title: TPRM Manager

Location: Bangalore and Gurgaon (Work From Office)

Experience: 2+ Years

Employment Type: Full-Time

Job Summary:

We are seeking an experienced and proactive Third Party Risk Management (TPRM) Consultant to join our growing risk and compliance team. The ideal candidate will be responsible for managing the end-to-end third-party risk lifecycle, driving compliance with regulatory and organizational standards, and collaborating with cross-functional teams to ensure robust information security and risk management practices.

Key Responsibilities:

- Lead and manage third-party risk assessments across vendors, service providers, and partners.
- Evaluate vendor controls around cybersecurity, data privacy, compliance, and operational risk.
- Collaborate with procurement, legal, IT security, and business teams to ensure third-party risks are identified, assessed, monitored, and mitigated effectively.
- Ensure compliance with ISO 27001, regulatory requirements, and internal GRC frameworks.
- Develop and maintain TPRM documentation, policies, processes, and metrics.
- Work closely with audit and compliance teams for periodic reviews, internal audits, and external regulatory audits.
- Monitor vendor performance and maintain an updated risk register.
- Conduct control testing, review vendor SOC reports, and track remediation plans for non-compliance or control gaps.
- Provide training and awareness sessions on third-party risk, GRC, and IT security standards to stakeholders.

Required Skills and Experience:

- Minimum 2 years of hands-on experience in Third Party Risk Management (TPRM).
- Strong knowledge of GRC frameworks, ISO 27001, IT Audit, and Network Security.
- Experience with cloud security and assessing cloud-based vendors (AWS, Azure, GCP).
- Familiarity with regulatory frameworks such as GDPR, RBI, SEBI, etc.
- Experience in risk assessment methodologies, control frameworks (NIST, COBIT), and issue tracking/remediation processes.
- Strong stakeholder management, analytical thinking, and problem-solving skills.
- Excellent communication, documentation, and presentation skills.

Preferred Qualifications:

- Bachelor's degree in Information Security, Computer Science, or a related field.
- Certifications such as CISA, CRISC, ISO 27001 Lead Auditor/Implementer, CISSP, or similar are a plus.
- Prior experience working in BFSI, IT/ITES, or consulting firms will be advantageous.

Immediate joiners preferred.

---