TPRM Expert

About the Role:

We are seeking a seasoned expert in Third-Party Risk Management to fill a Manager or Senior Manager position.

Key Responsibilities:

• Lead and manage Third-Party Risk Management engagements, including onboarding, due diligence, monitoring, and periodic risk assessments of vendors.
• Conduct risk-based audits of third-party vendors to evaluate security controls, regulatory compliance, and data protection measures.
• Develop and maintain frameworks for vendor risk assessment, scoring, and reporting aligned with organizational Governance, Risk & Compliance requirements.
• Collaborate with internal stakeholders, including procurement, legal, risk, and compliance teams, to ensure consistent risk evaluation practices.
• Implement and manage Governance, Risk & Compliance tools and platforms to streamline Third-Party Risk Management workflows and automate reporting.
• Prepare detailed reports, dashboards, and executive summaries for senior leadership and audit committees.
• Track regulatory updates and industry best practices to enhance Third-Party Risk Management policies and frameworks.

Additional Responsibilities for Senior Manager:

• Lead a team of risk consultants and provide technical mentorship, training, and quality reviews.
• Manage large-scale Third-Party Risk Management transformation programs, including implementation of Governance, Risk & Compliance solutions.
• Act as a trusted advisor for senior stakeholders and CXOs, ensuring alignment between business objectives and risk mitigation strategies.
• Drive continuous improvement by introducing innovative risk assessment methodologies and automation initiatives.

Required Skills & Qualifications:

• Experience: 6+ years for Manager; 9+ years for Senior Manager.
• Strong expertise in Third-Party Risk Management, Governance, Risk & Compliance, IT Risk Management, and Vendor Governance frameworks.
• Hands-on experience in risk assessments, audit reviews, and regulatory compliance.
• Working knowledge of industry standards and frameworks such as ISO 27001, SOC 2, NIST, GDPR, RBI Guidelines, etc.
• Proficiency in Governance, Risk & Compliance tools like Archer, ServiceNow, MetricStream, or similar platforms.
• Strong analytical, problem-solving, and stakeholder management skills.
• Excellent verbal and written communication skills.

Certifications (Preferred but Not Mandatory):

• CISA, CISM, CISSP, CRISC, or ISO 27001 LA certifications will be an added advantage.

Job Details:

• Job Type: Full-time, Permanent
• Work Mode: Onsite
• Position Level: Manager / Senior Manager
• Preferred Joining: Immediate or within 30 days
• Compensation: Competitive, based on experience and certifications