Deputy Manager / Manager – Third-Party Risk Management (TPRM)

Job Title : Deputy Manager / Manager – Third-Party Risk Management (TPRM)

Location : Pune

Experience : 5+ Years

Department : Information Risk Management / Cybersecurity

Employment Type : Full-time

About the Role :

We are looking for an experienced and driven Third-Party Risk Management (TPRM) professional to lead and manage end-to-end vendor risk assessments for global clients. The ideal candidate will have strong expertise in risk assessment, control testing, vendor governance, and regulatory compliance within the IT Risk & Cybersecurity domain.

As a Deputy Manager / Manager , you will oversee assessment delivery, manage client relationships, and contribute to the enhancement of TPRM frameworks and methodologies.

Key Responsibilities :

Lead and manage third-party risk assessments across cybersecurity, privacy, compliance, and operational domains.

Evaluate vendor controls against frameworks such as ISO 27001, NIST, SOC 2, GDPR , and industry-specific regulations .

Design and enhance vendor due diligence and onboarding processes , ensuring alignment with enterprise risk policies.

Coordinate with internal stakeholders, procurement, and vendor teams to track risk mitigation and remediation plans.

Review vendor responses, identify control gaps, and provide actionable recommendations to mitigate risks.

Prepare risk reports , dashboards, and executive summaries for senior leadership and clients.

Manage a small team of analysts, providing training, mentoring, and performance feedback.

Contribute to continuous improvement of TPRM methodologies, tools, and automation initiatives.

Required Skills & Qualifications :

Bachelor’s degree in Information Technology, Computer Science, or a related field .

5+ years of relevant experience in TPRM, vendor risk assessment, or IT Risk & Compliance.

Strong understanding of information security controls , risk frameworks , and control testing methodologies.

Exposure to TPRM platforms (e.g., Archer, ProcessUnity, OneTrust, ServiceNow VRM, MetricStream, etc.) is highly desirable.

Excellent stakeholder management, communication, and report-writing skills.

Certifications such as CISA, ISO 27001 LA, CRISC, CISSP , or CISM are preferred.

Preferred Attributes :

Proven ability to manage multiple assessments and deadlines.

Analytical mindset with attention to detail and accuracy.

Ability to work effectively with global clients and cross-functional teams.

Strong leadership and mentoring skills.