Deputy Manager / Manager - Third-Party Risk Management (TPRM)

Job Title :

Deputy Manager / Manager – Third-Party Risk Management (TPRM)

Location : Pune

Experience : 5+ Years

Department :

Information Risk Management / Cybersecurity

Employment Type : Full-time

About the Role :

We are looking for an experienced and driven

Third-Party Risk Management (TPRM) professional

to lead and manage end-to-end vendor risk assessments for global clients. The ideal candidate will have strong expertise in

risk assessment, control testing, vendor governance, and regulatory compliance

within the IT Risk & Cybersecurity domain.

As a

Deputy Manager / Manager

, you will oversee assessment delivery, manage client relationships, and contribute to the enhancement of TPRM frameworks and methodologies.

Key Responsibilities :

Lead and manage

third-party risk assessments

across cybersecurity, privacy, compliance, and operational domains.

Evaluate vendor controls against frameworks such as

ISO 27001, NIST, SOC 2, GDPR

, and

industry-specific regulations

Design and enhance

vendor due diligence

and

onboarding processes

, ensuring alignment with enterprise risk policies.

Coordinate with internal stakeholders, procurement, and vendor teams to track risk mitigation and remediation plans.

Review vendor responses, identify control gaps, and provide actionable recommendations to mitigate risks.

Prepare

risk reports

, dashboards, and executive summaries for senior leadership and clients.

Manage a small team of analysts, providing training, mentoring, and performance feedback.

Contribute to continuous improvement of TPRM methodologies, tools, and automation initiatives.

Required Skills & Qualifications :

Bachelor’s degree in

Information Technology, Computer Science, or a related field

5+ years of relevant experience

in TPRM, vendor risk assessment, or IT Risk & Compliance.

Strong understanding of

information security controls

risk frameworks

, and

control testing

methodologies.

Exposure to

TPRM platforms

(e.g., Archer, ProcessUnity, OneTrust, ServiceNow VRM, MetricStream, etc.) is highly desirable.

Excellent stakeholder management, communication, and report-writing skills.

Certifications such as

CISA, ISO 27001 LA, CRISC, CISSP

, or

CISM

are preferred.

Preferred Attributes :

Proven ability to manage multiple assessments and deadlines.

Analytical mindset with attention to detail and accuracy.

Ability to work effectively with global clients and cross-functional teams.

Strong leadership and mentoring skills.