About Client:
One of our MNC clients offers technology consulting and digital solutions to global enterprises across industries enabling transformative scale at unparalleled speed. With 145000 professionals across 90 countries helping 1100 clients it provides a full spectrum of services including consulting information technology enterprise applications business process services engineering services network services customer experience & design services AI & analytics and cloud & infrastructure services. It is the first Indian company in the world to have been awarded the Sustainable Markets Initiatives Terra Carta Seal in recognition of actively leading the charge to create a climate and naturepositive future.
Job Overview: We are looking for a highly skilled and experienced ThirdParty Risk Management (TPRM) professional to join our team. The ideal candidate will be responsible for assessing monitoring and mitigating risks associated with thirdparty vendors contractors and service providers. This role ensures that all thirdparty relationships comply with organizational standards regulatory requirements and industry best practices.
Key Responsibilities: - ThirdParty Risk Assessments: Conduct risk assessments for all thirdparty vendors focusing on areas such as security privacy financial stability regulatory compliance and operational impact.
- Risk Mitigation: Develop and implement strategies to mitigate risks associated with thirdparty relationships. Collaborate with stakeholders to address identified risks and implement controls.
- Due Diligence: Perform thorough due diligence before engaging with new thirdparty vendors ensuring alignment with the organizations risk tolerance and regulatory requirements.
- Ongoing Monitoring: Continuously monitor thirdparty relationships for emerging risks changes in business operations compliance and security posture.
- Vendor Audits and Assessments: Coordinate periodic audits and assessments of thirdparty vendors to evaluate performance security compliance and risk management practices.
- Contract Management: Review and provide input into thirdparty contracts ensuring that riskrelated clauses such as data protection security and compliance requirements are included.
- Collaboration: Work closely with procurement legal IT compliance and other departments to ensure a comprehensive thirdparty risk management framework.
- Reporting: Prepare and present regular reports on thirdparty risk status trends and issues to senior management and relevant stakeholders.
- Regulatory Compliance: Ensure that thirdparty risk management processes comply with relevant regulations (e.g. GDPR SOC 2 PCIDSS HIPAA).
- Incident Management: Act as the primary point of contact for any thirdparty related security incidents or breaches. Work with vendors and internal teams to investigate and mitigate the impact of such incidents.
Required Skills & Experience: - Risk Management Expertise: Strong understanding of risk management principles frameworks and practices especially related to thirdparty risks.
- Vendor Management: Experience managing vendor relationships and performing risk assessments for thirdparty providers contractors and service providers.
- Compliance Knowledge: Familiarity with industry standards and regulations (e.g. GDPR SOC 2 PCIDSS HIPAA) and their application in thirdparty relationships.
- Security & Privacy Knowledge: Understanding of cybersecurity principles data privacy and best practices in vendor security and compliance.
- Communication Skills: Strong verbal and written communication skills to interact with stakeholders across various departments and levels of the organization.
- Analytical Skills: Ability to evaluate risks identify trends and make informed decisions based on quantitative and qualitative data.
- Project Management: Experience in managing projects related to thirdparty risk management including tracking deadlines milestones and deliverables.
- Technical Proficiency: Familiarity with risk management tools vendor management software and MS Office Suite (Excel Word PowerPoint).
Educational Requirements: - Bachelors degree in Business Risk Management Information Security Finance or a related field.
- Certifications such as Certified Third Party Risk Professional (CTPRP) Certified Information Systems Auditor (CISA) Certified Risk and Information Systems Control (CRISC) or similar are a plus.
Desirable Skills: - Experience with enterprise risk management (ERM) frameworks.
- Knowledge of IT risk management and information security frameworks such as ISO 27001 NIST or COBIT.
- Experience in handling complex highrisk vendor relationships.
- Ability to work in a fastpaced dynamic environment with a proactive approach to problemsolving.
Benefits: - Competitive salary
- Health dental and vision insurance
- Retirement savings plan with employer match
- Paid time off and holidays
- Professional development and certification reimbursement
- Flexible working arrangements