Urgent Hiring For TPRM || Mumbai || Gurugram
Posted Updated 3
views
Summary
A governance/risk role focused on third-party risk management: the person conducts vendor risk assessments and due diligence, reviews SOC 1/SOC 2/ISO 27001 and GDPR compliance reports, tracks remediation, and documents risks across the vendor lifecycle. Targets candidates with 5-10 years of TPRM/IT risk experience in Mumbai, Gurugram, or Bengaluru.
Key Responsibilities
- Conduct third-party/vendor risk assessments and due diligence.
- Evaluate vendor risks related to information security, data privacy, IT security, and regulatory compliance.
- Review SOC 1, SOC 2, ISO 27001, and other compliance reports.
- Identify potential risks, control gaps, and compliance issues.
- Perform vendor security assessments using questionnaires and risk assessment frameworks.
- Coordinate with vendors and internal stakeholders to obtain required documents and evidence.
- Monitor vendor risk throughout the engagement lifecycle.
- Prepare risk assessment reports and maintain proper documentation.
- Track remediation plans and ensure timely closure of identified risks.
- Ensure compliance with applicable regulatory requirements and internal policies.
Required Skills
- Experience in Third-Party Risk Management (TPRM), Vendor Risk Management (VRM), or IT Risk Management.
- Knowledge of information security, IT controls, and risk assessment frameworks.
- Understanding of SOC 1, SOC 2, ISO 27001, GDPR, and other compliance standards.
- Experience in vendor due diligence and risk assessment.
- Strong analytical, documentation, and communication skills.
- Ability to interact with vendors and internal stakeholders.Role & responsibilities
Preferred candidate profile