TPRM- DM

Role Overview

Join Deloittes Cyber team to help organizations manage third-party cyber risks, strengthen security controls, and meet regulatory and compliance requirements. The role involves leading TPRM engagements, overseeing risk assessments and control testing, managing client relationships, and delivering high-quality risk and compliance solutions.

Key Responsibilities

• Lead Third-Party Risk Management (TPRM) engagements and oversee vendor risk assessments, including security, privacy, and regulatory risks.
• Manage TPRM platforms and tools such as ServiceNow, Archer, and ProcessUnity.
• Review third-party risk assessment findings, identify control gaps, recommend remediation, and prepare executive-level reports.
• Ensure alignment with regulatory and security frameworks, including DORA, FedRAMP, GDPR, ISO 27001, and NIST.
• Oversee IT General Controls (ITGC), PCI DSS, and third-party control testing activities.
• Support privacy risk assessments and evaluate data protection requirements across third-party engagements.
• Contribute to security architecture reviews for AI-enabled platforms and data environments.
• Manage client relationships, project deliverables, stakeholder expectations, and engagement quality.
• Lead and mentor team members while ensuring timely and high-quality project delivery.
• Support executive presentations, report writing, and identification of opportunities to enhance client engagements.

Mandatory Skills

• Third-Party Risk Management (TPRM) and Vendor Risk Assessments
• Cybersecurity Risk Management and Compliance
• TPRM tools: ServiceNow, Archer, or ProcessUnity
• ITGC and PCI DSS Control Testing
• Information Security Risk and Privacy Assessments
• ISO 27001, NIST, and GDPR
• Regulatory Compliance: DORA and FedRAMP
• Client Management, Stakeholder Engagement, and Team Leadership
• Risk Reporting, Analytical Skills, and Executive Presentations

Education

B.E./B.Tech. or a Master’s degree in Computer Science, Information Security, Engineering, or a related discipline.