TPRM : Information Security
Description
Roles and Responsibilities :
- Develop and implement Third Party Risk Management (TPRM) programs to identify, assess, and mitigate risks associated with third-party vendors.
- Conduct regular risk assessments and due diligence reviews of third parties to ensure compliance with regulatory requirements.
- Collaborate with internal stakeholders to develop policies, procedures, and controls for managing TPRM activities.
- Provide training and awareness programs for employees on TPRM best practices.
Job Requirements :
- 2-10 years of experience in Third Party Risk Management or related field.
- Strong understanding of ISO 27001/ISO 31000 standards for Information Security Management System (ISMS).
- Experience with NIST Cybersecurity Framework (CSF), SOC 2/SSAE18 certifications preferred.