TPRM Manager - Cyber

Job Title :

Manager – Third Party Risk Management (TPRM)

Location : Bangalore

Experience Required :

6+ years

Role Overview

We are seeking an experienced professional to join our team as a

TPRM Manager , with a strong background in Third Party Risk Management and working knowledge of

Data Privacy frameworks . The role involves assessing third-party vendors, managing risks related to information security and compliance, and ensuring adherence to regulatory standards.

Key Responsibilities

Lead and manage the

Third Party Risk Management (TPRM)

process, including vendor onboarding, due diligence, monitoring, and offboarding.

Conduct

risk assessments

on third parties across security, privacy, compliance, and operational domains.

Collaborate with internal stakeholders (IT Security, Legal, Compliance, Procurement, and Business Units) to ensure third parties meet organizational standards.

Review and interpret

data privacy regulations (GDPR, DPDP Act, etc.)

to evaluate vendor compliance.

Track, report, and remediate third-party risks through risk registers and dashboards.

Support the development and implementation of

TPRM policies, frameworks, and playbooks .

Manage

audit and compliance activities

related to third-party vendors.

Provide subject matter expertise in

cybersecurity, risk, and privacy

to improve vendor governance.

Qualifications & Skills

Bachelor’s degree in Information Technology, Computer Science, Risk Management, or related field.

Minimum

6+ years of experience

in Third Party Risk Management, Vendor Risk, Information Security, or related fields.

Exposure to

Data Privacy frameworks

(GDPR, DPDP Act, HIPAA, or equivalent).

Strong understanding of

ISO 27001, NIST, SOC 2, PCI DSS

frameworks.

Certifications preferred :

CISA, CISSP, CISM

(any one or more).

Strong analytical and problem-solving skills with the ability to manage multiple stakeholders.

Excellent communication, reporting, and vendor management skills.

Good to Have

Experience in risk consulting, BFSI, or IT / ITES industries.

Hands-on experience with

GRC platforms

(e.g., Archer, ServiceNow, OneTrust, MetricStream).

Familiarity with contract reviews and data protection clauses.