Third Party Risk Management

4 days ago


Bengaluru Chennai Hyderabad, India Tata Consultancy Services Full time ₹ 12,00,000 - ₹ 36,00,000 per year

Exp : 5 to 12 yrs

Job description

Role & responsibilities

  • Should be able to develop and manage a comprehensive third party risk management framework / program.
  • Should be able to drive regulatory compliance / remediation programs such as Digital Operational Resilience Act (DORA).
  • Should be independently able to manage third party due diligence including initial risk assessments and ongoing monitoring.
  • Contribute to governance and facilitate remediation recommendations of related risks, deficiencies, gaps or issues, advice with identifying compensating controls alternative where compliance requirements cannot be met.
  • Document and present overall residual risk to higher management for approvals and risk acceptances.
  • Interact with vendors, business, and multiple stakeholders to assess, explain and remediate the risks identified.
  • Ongoing monitoring activities such as performance monitoring, contractual compliance, SLA/KPI adherence, negative news monitoring etc.
  • Test design and operating effectiveness of TPRM controls, identify gaps and recommend improvements.
  • Support key reporting activities associated within key functions. Perform adhoc IT risk analysis and reporting.

Technical/Functional Skills

  • Relevant experience in TPRM (Program/Framework level)
  • Knowledge of Broader Operational Resilience / Tech Resilience Framework / Programs
  • Expertise in Third Party Risk Assessments
  • Expertise in cyber security including standards such as ISO27001, PCI-DSS, ISO 22301 etc.
  • Experienced in review of SSAE18, SOC 2, HITRUST, SIG and CAIQ reports.
  • Understanding of application and network security and should understand penetration testing and scan reports.
  • Knowledge of key TPRM regulations such as DORA, OSFI B10, FCA FG 16/5, PRA SS2/21, FFIEC, EBA Guidelines etc.
  • Strong audit / control testing skills are desirable.
  • Certifications such as CTPRP, CTPRA, CRVPM, CRISC, CISA, CISSP are good to have.


  • Bengaluru, India Live Connections Full time

    Position:. Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: RemoteEducational Qualifications / Certifications- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).- Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).- Strong...


  • Bengaluru, India Live Connections Full time

    Position:. Manager – Information Security (Third-Party Risk Management) Experience: 15–20 Years Work Mode: Remote Educational Qualifications / Certifications - Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience). - Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more). -...


  • Bengaluru, India Live Connections Full time

    Position: . Manager – Information Security (Third-Party Risk Management) Experience: 15–20 Years Work Mode: Remote Educational Qualifications / Certifications Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience). Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more). Strong...


  • Bengaluru, India Live Connections Full time

    Position: . Manager – Information Security (Third-Party Risk Management) Experience: 15–20 Years Work Mode: Remote Educational Qualifications / Certifications Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience). Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more). Strong...


  • Bengaluru, India Live Connections Full time

    Position:. Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: Remote Educational Qualifications / CertificationsBachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).Strong verbal...


  • Bengaluru, India Live Connections Full time

    Position: . Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: RemoteEducational Qualifications / CertificationsBachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).Strong verbal...


  • Bengaluru, India Live Connections Full time

    Position: . Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: RemoteEducational Qualifications / CertificationsBachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).Strong...


  • Bengaluru, India Live Connections Full time

    Position:. Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: Remote Educational Qualifications / CertificationsBachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).Strong verbal...


  • Bengaluru, India Live Connections Full time

    Position:. Manager – Information Security (Third-Party Risk Management)Experience: 15–20 YearsWork Mode: Remote Educational Qualifications / CertificationsBachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).Strong verbal...


  • Bengaluru, India Capital One Full time

    At Capital One India, we solve fundamental business problems at scale using advanced analytics, data science and machine learning. We specialize in deriving valuable insights about various aspects of the business - including product and process design, consumer behavior, regulatory and credit risk, and much more - from large volumes of data to build cutting...