Vendor Risk Management

Position - Deputy General Manager

Location - Noida

Education - Graduate or postgraduate degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Professional Qualifications - ISO 27001 Lead Auditor, CISA, CISM, CISSP, CRISC, or equivalent.

Experience - 12–15 years of overall experience in Information Security, Cybersecurity, and Risk Management. OR Minimum 8-10 years of hands-on experience in Vendor Risk Management / Third-Party Risk Management.

Key Responsibilities

Lead the third-party risk management program to assess and report vendor-related risks.

Enhance the VRM framework to address evolving threats across cyber, compliance, privacy, ESG, and more.

Apply strategic thinking to improve the program through continuous innovation.

Manage vendor lifecycle activities including governance, profiling, and risk assessments.

Serve as SME across domains like InfoSec, Data Privacy, BCP, and Regulatory Compliance.

Identify relevant and emerging risk domains based on vendor service scope.

Conduct and review assessments using the VRM framework and update risk profiles.

Collaborate with vendors on mitigation strategies and track remediation efforts.

Improve assessment tools and coordinate with internal and external stakeholders.

Present reports, support audits, and respond to queries on vendor risk posture.

Demonstrated experience working with senior stakeholders and external clients.

Desired Skills and Competencies

Strong knowledge of Data Privacy Regulations (e.g., GDPR, CCPA), Cloud Security, and Business Continuity Planning.

Ability to analyze the data and create various reports for senior management.

Skilled in risk assessment frameworks and advanced MS Office tools.

Excellent analytical, problem-solving, and communication abilities.

Experienced in mentoring junior team members and managing time effectively.

Self-motivated, collaborative, and adaptable to global, cross-functional environments.

Familiarity with tools like Process Unity or ServiceNow is an added advantage.

Minimum 5 years of experience in team or people management.