Assistant Manager - Risk Advisory Extended Enterprise / TPRM

Role Description

• Lead and support the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in accordance with ISO 27001 standards.
• Drive and oversee Third-Party Risk Management (TPRM) activities, including comprehensive vendor risk assessments, due diligence, and ongoing risk monitoring.
• Lead cybersecurity risk assessments and gap analyses to evaluate compliance with internal policies, industry best practices, and regulatory frameworks.
• Act as a key liaison with clients, managing multiple projects, stakeholder relationships and expectations to ensure delivery of high-quality risk and compliance services.
• Collaborate cross-functionally with client departments such as compliance, internal audit, legal, and regulatory teams to identify, interpret, and document security and compliance requirements.
• Manage and conduct risk assessments and audits encompassing people, process, and technology, identifying risks, gaps, and opportunities for improvement.
• Prepare and review detailed information security risk assessment and audit reports, including recommendations for mitigating controls.
• Oversee the planning, development, and execution of vendor security reviews and assessments, including defining methodologies and vendor evaluation models.
• Mentor and provide guidance to junior team members, sharing expertise especially on complex, judgmental, and specialized security issues.
• Participate actively in strategy development and continuous improvement initiatives for security risk management practices.

Desired qualifications

Location and way of working

Base location : Bangalore.

Professional is required to work from office.

(ref : iimjobs.com)