TPRM Consultant

Role & responsibilities

The Analyst/ Associate Consultant supports delivery of enterprise-wide Third-Party Risk Management (TPRM) engagements, focusing on execution support across the

end-to-end vendor lifecycle. The role emphasizes foundational cyber/ information security risk knowledge, documentation quality, communication clarity, and learning

agility. Prior deep TPRM experience is not mandatory.

Key Responsibilities

• Support execution of end-to-end TPRM lifecycle activities, including vendor

onboarding risk assessments, periodic vendor reviews, continuous monitoring

activities

• Assist in risk identification, risk assessment, and basic risk scoring across

information security risk, operational risk, business continuity risk

• Review and analyze third-party artifacts, such as security policies and

procedures, ISO certifications and SOC reports, vendor documentation and

questionnaires

• Support risk issue tracking, remediation follow-ups, and closure documentation
• Assist in development and maintenance of TPRM policies and procedures, risk

assessment documentation, risk registers and reports

• Coordinate with internal stakeholders and vendors to follow up on information

requests, support assessment timelines, clarify risk-related queries

Knowledge & Experience Requirements -

Mandatory

• 02 years of experience or exposure to:
• Cybersecurity, information security, IT risk/ IT audit/ GRC
• Foundational understanding of:
• Risk management concepts
• Difference between policy, standard, and procedure
• Basic cyber/ information security concepts

• Awareness of third-party risk management concepts, vendor risk and due

diligence principles (basics/ preliminary)

• Strong written and verbal communication skills
• Willingness to learn and adapt in a consulting environment
• Exposure to or knowledge of vendor onboarding or due diligence activities
• Exposure to or knowledge of business continuity concepts, continuous monitoring, risk reporting or documentation