Information Security / Vendor Risk Manager - TPRM Framework

Description :

Position : Information Security & Vendor Risk Manager

Work Level : Middle Management

Industry Type : IT Services & Consulting

Location : India

Job Summary :

The Information Security & Vendor Risk Manager will operate at a middle management level, serving as a key driver of the organization's Third-Party Risk Management (TPRM) program.

This self-motivated and results-driven role requires deep technical expertise in cybersecurity frameworks, cloud security, and compliance standards (e.g., PCI-DSS, ISO 27001).

The manager will be responsible for developing the TPRM framework, conducting end-to-end technical security assessments of third parties, and leading risk mitigation advisory and reporting to senior management to ensure compliance and security assurance across all vendor engagements.

Job Description :

TPRM Program Management and Governance :

• Develop, implement, and continuously mature the organizations holistic Third-Party Risk Management (TPRM) framework, ensuring alignment with global standards, industry best practices, and internal risk appetite.
• Define and maintain technical policies, procedures, and rigorous guidelines governing the lifecycle of third-party engagements, from initial due diligence to secure offboarding.
• Drive program initiatives with a results-driven mindset, focusing on quantifiable metrics for risk reduction and operational efficiency across the TPRM function.

Risk Assessment and Technical Due Diligence :

Continuous Monitoring and Risk Mitigation Advisory :

Reporting, Compliance, and Stakeholder Engagement :

Required Skills & Qualifications :

Preferred Skills :

(ref : hirist.tech)