TPRM & GRC Specialist

Role & responsibilities

• Third-Party Risk Management (TPRM)
• Vendor Risk Assessment (VRA)
• Governance, Risk & Compliance (GRC)
• Cybersecurity Risk Management
• Information Security Controls
• Data Privacy & Protection
• Regulatory Compliance
• Information Security Governance
• Strong knowledge of security, risk, and compliance frameworks including:
• ISO 27001
• NIST Cybersecurity Framework (CSF)
• COBIT
• SOC 2
• PCI-DSS
• GDPR and Data Privacy requirements
• RBI/SEBI Regulatory Guidelines (where applicable)
• Experience reviewing:
• SOC 1 / SOC 2 Reports
• ISO 27001 Certifications and Audit Reports
• Penetration Testing and Vulnerability Assessment Reports
• Security Questionnaires
• Business Continuity Plans (BCP)
• Disaster Recovery (DR) Documentation
• Experience with risk assessment methodologies, risk scoring techniques, control frameworks, and risk remediation processes.
• Experience in audit management, compliance assessments, control reviews, and regulatory compliance activities.
• Ability to identify, assess, document, and monitor vendor, operational, cyber, and compliance risks.
• Strong analytical, communication, documentation, presentation, and stakeholder management skills.
• Experience preparing risk reports, governance dashboards, metrics, and Key Risk Indicators (KRIs).

Preferred candidate profile

• Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, or related field.
• 48 years of experience in TPRM, Vendor Risk Management, Cybersecurity, GRC, Audit, or Compliance functions.