TPRM Consultant

TPRM Consultant / Sr. Consultant

Responsibilities:

• Manage end-to-end Third-Party Risk Management (TPRM) lifecycle including onboarding, due diligence, periodic reviews, and risk assessments.
• Conduct vendor risk evaluations aligned with frameworks like ISO 27001, NIST, SOC 2, and GDPR.
• Utilize TPRM platforms such as Archer, ProcessUnity, and MetricStream for assessments and reporting.
• Collaborate with internal teams and vendors to ensure compliance with enterprise risk frameworks.
• Lead vendor risk monitoring efforts through periodic reviews, risk scoring updates, and detection of emerging risks.
• Analyze financial, operational, and reputational risks associated with third-party engagements.
• Prepare risk reports, dashboards, and presentations for stakeholders.
• Support audit readiness activities and respond to internal and external audit queries related to third-party risk.
• Support client-facing engagements and ensure timely completion of risk reviews.
• Maintain trackers and documentation for all TPRM activities.

Qualifications:

• Bachelors degree in business, Information Technology, Risk Management, Finance, or related field is mandatory; Master's degree or relevant certifications are strongly preferred
• 4–10 years of experience in TPRM, vendor risk management, or related domains
• Strong understanding of third-party risk lifecycle management, enterprise risk management (ERM) concepts, risk frameworks and regulatory standards
• Hands-on knowledge of TPRM frameworks, risk assessment methodologies, and associated regulatory requirements (e.g., ISO 27001, SOC 2, NIST, GDPR, RBI Guidelines)
• Proven ability to conduct detailed vendor risk assessments, due diligence, and process improvement
• Experience with third-party risk management platforms (e.g., Aravo, RSA Archer, MetricStream) and proficiency in MS Office (Excel, PowerPoint, Word)
• Ability to manage multiple concurrent projects and work independently or as part of a team
• Provide strategic advice on TPRM program design and governance to senior leadership
• Experience in client-facing environments
• Certifications such as CTPRP, CISA, CRISC, or CISSP are preferred