Senior Associate - Third-Party Security Risk Management

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?

About the role

As a Third-Party Security Risk Management – Senior Associate, you will lead the assessment, monitoring, and governance of third-party security and operational risks across the vendor lifecycle. You will be a key member of the Third-Party Security Risk Management team, collaborating with Procurement, Legal, IT, Security, Compliance, and business stakeholders to ensure vendor risks are effectively identified, evaluated, and managed.

You will have the autonomy to drive risk assessments, support governance decisions, mentor junior team members, and contribute to process improvements and automation initiatives while helping strengthen the organization’s third-party risk management framework.

In this role, you will:

• Lead and execute third-party security risk assessments including onboarding reviews, reassessments, and continuous monitoring activities across cybersecurity, compliance, and operational risk domains.
• Perform detailed reviews of vendor questionnaires, supporting evidence, and assessment documentation to validate security controls and risk posture.
• Analyze assessment findings, prepare risk reports, and maintain risk registers using ServiceNow (SNOW) or equivalent governance and risk management platforms.
• Drive remediation management by tracking identified risks, coordinating with stakeholders, and ensuring timely closure of corrective actions.
• Collaborate with cross-functional teams including Procurement, Legal, IT, and Business Units to support risk evaluations, governance requirements, and compliance objectives.

What you must have to be considered

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, Business Administration, or a related discipline.
• 6-9 years of proven experience in Third-Party Security Risk Management (TPSRM), Vendor Risk Management, Information Security, Cybersecurity Risk, Compliance, or Operational Risk Management.
• Strong understanding of security frameworks, risk assessment methodologies, control evaluation techniques, and vendor due diligence processes.
• Experience analyzing vendor security documentation, assessment evidence, and risk findings while preparing executive-level reports and recommendations.
• Professional certifications such as ISO 27001, CISA, CISM, and/or ISO 42001.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.

These will help you succeed

• Hands-on experience with ServiceNow (SNOW), Governance Risk and Compliance (GRC) tools, or third-party risk management platforms.
• Knowledge of industry regulations and frameworks including ISO 27001, NIST, DORA, and related security standards.
• Experience supporting risk governance forums, exception management processes, and risk acceptance workflows.
• Strong stakeholder management, communication, and presentation skills with the ability to engage senior leadership.
• Experience mentoring junior analysts and driving quality improvements within assessment and remediation processes.
• Exposure to automation initiatives, workflow optimization, AI-enabled risk assessment capabilities, and audit readiness activities.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a Cognizant office in Chennai, Coimbatore, or Bangalore. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.