Associate Director – Third Party Risk Management (Cybersecurity)

Job Title : Associate Director – Third Party Risk Management (TPRM)

Location : Mumbai

Experience : 9+ Years

Joining : Immediate joiners preferred

Preference : Big 4 experience; GCC experience highly desirable

Role Overview :

We are seeking an experienced Associate Director – TPRM to lead and strengthen our Third-Party Risk Management practice. The ideal candidate will bring strong expertise across TPRM, GRC, ISMS, and ISO 27001 , with demonstrated experience in managing large-scale risk programs, stakeholder engagement, and delivering high-quality advisory engagements.

Key Responsibilities :

Lead and manage end-to-end Third-Party Risk Management programs, including onboarding, due diligence, assessments, monitoring, and reporting.

Oversee risk assessments across domains such as information security, operational risk, compliance, financial risk, and business continuity.

Design, enhance, and implement TPRM frameworks, policies, methodologies, and assessment templates.

Drive advisory engagements related to ISO 27001, ISMS implementation, and GRC processes .

Work closely with global and regional teams, including stakeholders from GCCs, to deliver integrated risk solutions.

Conduct maturity assessments and develop roadmaps for TPRM and GRC transformation initiatives.

Manage client relationships, lead presentations, and provide insights for risk mitigation and process improvement.

Supervise and mentor team members, ensuring project quality, timely delivery, and compliance with internal standards.

Support business development activities, including proposals, solutioning, and client discussions.

Required Skills & Experience :

9+ years of experience in TPRM , GRC , ISMS , and ISO 27001 implementations or audits.

Prior experience in the Big 4 is strongly preferred.

Exposure to GCC environments and large global organizations is highly desirable.

Strong understanding of regulatory requirements, cybersecurity controls, and third-party lifecycle management.

Experience with TPRM platforms / tools (e.g., Archer, MetricStream, OneTrust, ServiceNow VRM, ProcessUnity) is an advantage.

Excellent communication, stakeholder management, and leadership skills.

Ability to manage multiple projects, lead teams, and drive risk transformation initiatives.