Manager – Third Party Risk Management

16 hours ago

Bengaluru, Karnataka, India Cubical Operations LLP Full time ₹ 8,00,000 - ₹ 24,00,000 per year

Job Title:
Manager – Third Party Risk Management (TPRM)

Location:
Bangalore

Experience:
6+ Years

Department:
Information Risk Management / Information Security

About the Role:

We are seeking an experienced
TPRM Manager
to lead and enhance our Third-Party Risk Management framework. The ideal candidate will have a strong background in
Information Risk Management (IRM)
,
Information Security (InfoSec)
, and
vendor risk assessment
, with the ability to evaluate and mitigate risks associated with third-party engagements across business functions.

Key Responsibilities:

  • Lead end-to-end
    Third Party Risk Management
    lifecycle including onboarding, due diligence, assessment, monitoring, and offboarding.
  • Perform detailed
    risk assessments
    of vendors based on defined risk criteria — including Information Security, Privacy, and Regulatory requirements.
  • Collaborate with internal stakeholders (Procurement, Legal, Compliance, IT Security) to ensure adherence to enterprise risk standards.
  • Identify and assess
    information security and operational risks
    associated with third parties and recommend appropriate mitigation actions.
  • Develop and maintain the
    TPRM framework
    , policies, and risk assessment methodologies in line with industry best practices (ISO 27001, NIST, etc.).
  • Review vendor SOC reports, ISO certifications, penetration test results, and other assurance documents to validate control effectiveness.
  • Track, monitor, and report on vendor risks, remediation progress, and performance metrics to senior management.
  • Support internal and external audits related to TPRM, IRM, and InfoSec programs.
  • Drive
    continuous improvement initiatives
    in the TPRM process using automation and data analytics where possible.

Required Skills & Experience:

  • 6+ years of experience in
    Third Party Risk Management
    ,
    Information Risk Management
    , or
    Information Security
    .
  • Strong understanding of
    risk assessment frameworks
    (ISO 27001, NIST, COBIT, CSA, etc.).
  • Hands-on experience in conducting
    vendor security assessments
    ,
    control testing
    , and
    remediation follow-ups
    .
  • Working knowledge of
    data protection, cybersecurity principles
    , and
    compliance standards
    (GDPR, RBI, SEBI, etc.).
  • Excellent analytical, communication, and stakeholder management skills.
  • Experience in using
    TPRM tools or GRC platforms
    is an advantage (e.g., Archer, ServiceNow, OneTrust, MetricStream).

Preferred Certifications:

  • ISO 27001 Lead Auditor / Implementer
  • CISA / CISM / CRISC / CISSP (preferred)
  • Any Third-Party Risk or Vendor Risk certification will be an added advantage

Key Attributes:

  • Strong problem-solving and decision-making skills
  • Ability to work independently and in cross-functional teams
  • Excellent stakeholder and vendor management capability
  • Attention to detail with a focus on compliance and risk mitigation

  • Third Party Risk Management

    1 week ago

    Bengaluru, Karnataka, India Kiya Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    position: Contract to Hire(C2H)Skill: Third-Party Risk ManagementExperience: 3+Location: BangNotice Period: Immediate to 15 DaysJob Descrption :General Risk management and Controls management awareness.Internal Controls Testing/ Internal Audit.Understanding of Third-Party Risk Management including Inherent and Residual Risks.Familiarity with the banking...

  • Third Party Risk Management

    6 days ago

    Bengaluru, Karnataka, India State Street Corporation Full time ₹ 6,00,000 - ₹ 12,00,000 per year

    Job Description Third-Party Risk Management Due Diligence - Tech Lead Role Summary State Street uses third parties to support internal processes and in the delivery of certain products and services to clients. These third parties are evaluated and risk assessed through our Third-Party Risk Management (TPRM) Program. The Due Diligence Onboarding...

  • Third Party Risk Management Analyst

    6 days ago

    Bengaluru, Karnataka, India Finastra Full time ₹ 4,00,000 - ₹ 8,00,000 per year

    Who are we?At Finastra, we are a dynamic global provider of open finance software solutions, dedicated to expanding access to financial services. Our innovative applications span Lending, Payments, Treasury and Capital Markets, and Universal Banking. Proudly serving over 8,000 customers, including 45 of the world's top 50 banks, we aim to boost financial...

  • Manager - Third Party Risk Management

    2 weeks ago

    Bengaluru, Karnataka, India BNP Paribas Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    ResponsibilitiesDirect Responsibilities The CIB ITO TPRM Governance is focused on development and deployment of robust control framework for all internal and external third-party services globally. CIB ITO Offshore TPRM business manager responsibilities includes but not limited to.Working with owners of various businesses and processes across regions to map...

  • Senior Cybersecurity – Third Party Risk Management

    1 week ago

    Bengaluru, Karnataka, India AT&T Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Job Description:Role: Senior – Third Party Risk Management (TPRM)About the Company:Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold...

  • Senior Cybersecurity Third Party Risk Management

    14 hours ago

    Bengaluru, Karnataka, India AT&T Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Job Description Role: Senior Third Party Risk Management (TPRM)About the Company: Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold...

  • Third Party Risk Analyst

    6 days ago

    Bengaluru, Karnataka, India Stripe Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    About StripeStripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead....

  • Junior Third-Party Risk Assessor

    6 days ago

    Bengaluru, Karnataka, India NETSACH GLOBAL Full time ₹ 4,00,000 - ₹ 12,00,000 per year

    Greetings from Netsach - A Cybersecurity Company.Job Summary:Our client, a leading bank based in Dubai, is looking for a Junior Third-Party Risk Assessor to join their growing Risk Management function. This entry-level role will support the assessment, monitoring, and governance of third-party service providers, ensuring compliance with internal policies and...

  • IS Service Owner For Third Party Risk Management

    2 weeks ago

    Bengaluru, Karnataka, India ABB Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    This Position reports to:Global IS Manager - SRC Advisory and AssessmentsYour role and responsibilitiesThe Service Owner for Third Party Risk Management(TPRM), within IS SRC Advisory & Assessments organization is responsible for designing, implementing and maintaining the framework to deliver the services in scope in time, budget and in line with the...

  • Sr. Manager, Information Security Third-party Risk Management

    2 weeks ago

    Bengaluru, Karnataka, India Grant Thornton Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    Role DescriptionThe Senior Manager, Information Security Third-party Risk Management position will be an integral member of the Information Security and Risk Management team. This role will be responsible for design, development, implementation and monitoring of risk management program. Work in Chief Information Security Officer (CISO) office under Associate...