Vendor Risk Management

Position - Deputy General Manager

Location - Noida

Education - Graduate or postgraduate degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Professional Qualifications - ISO 27001 Lead Auditor, CISA, CISM, CISSP, CRISC, or equivalent.

Experience - 12–15 years of overall experience in Information Security, Cybersecurity, and Risk Management. OR Minimum 8-10 years of hands-on experience in Vendor Risk Management / Third-Party Risk Management.

Key Responsibilities

• Lead the third-party risk management program to assess and report vendor-related risks.
• Enhance the VRM framework to address evolving threats across cyber, compliance, privacy, ESG, and more.
• Apply strategic thinking to improve the program through continuous innovation.
• Manage vendor lifecycle activities including governance, profiling, and risk assessments.
• Serve as SME across domains like InfoSec, Data Privacy, BCP, and Regulatory Compliance.
• Identify relevant and emerging risk domains based on vendor service scope.
• Conduct and review assessments using the VRM framework and update risk profiles.
• Collaborate with vendors on mitigation strategies and track remediation efforts.
• Improve assessment tools and coordinate with internal and external stakeholders.
• Present reports, support audits, and respond to queries on vendor risk posture.
• Demonstrated experience working with senior stakeholders and external clients.

Desired Skills and Competencies