Cyber Risk & Vendor Security Consultant

Job Title : Consultant / Senior Consultant – Third-Party Risk Management (TPRM)

Location : Mumbai, India

Experience Required : Minimum 2 to 6 years in TPRM / Vendor Risk / Information Security / Risk Advisory

Employment Type : Full-time

About the Role

We are looking for a skilled and motivated Consultant / Senior Consultant – Third-Party Risk Management (TPRM) to join our Risk Advisory / Cyber Risk / Governance team in Bangalore. The ideal candidate will have hands-on experience managing third-party risk programs, performing vendor assessments, and ensuring compliance with regulatory and internal risk frameworks.

Key Responsibilities

• Lead and execute third-party risk assessments (security, privacy, operational, financial, compliance, etc.).
• Evaluate vendors against defined risk frameworks (e.G., ISO 27001, SOC 2, GDPR, NIST, etc.).
• Review vendor due diligence questionnaires and supporting evidence for risk identification.
• Support the design, implementation, and enhancement of TPRM programs , policies, and processes.
• Track and monitor remediation plans and ensure closure of identified vendor risks.
• Collaborate with internal stakeholders such as procurement, legal, compliance, and IT security teams.
• Contribute to automation and process improvement initiatives within the TPRM function.
• Prepare risk reports, dashboards, and metrics for management review.
• Mentor junior team members and support client engagements as a subject matter contributor.

Required Skills & Qualifications

Preferred Certifications (Nice to Have)