TPRM & GRC Specialist

Role & responsibilities

• Third-Party Risk Management (TPRM)

• Vendor Risk Assessment (VRA)

• Governance, Risk & Compliance (GRC)

• Cybersecurity Risk Management

• Information Security Controls

• Data Privacy & Protection

• Regulatory Compliance

• Information Security Governance

• Strong knowledge of security, risk, and compliance frameworks including:

• ISO 27001

• NIST Cybersecurity Framework (CSF)

• COBIT

• SOC 2

• PCI-DSS

• GDPR and Data Privacy requirements

• RBI/SEBI Regulatory Guidelines (where applicable)

• Experience reviewing:

• SOC 1 / SOC 2 Reports

• ISO 27001 Certifications and Audit Reports

• Penetration Testing and Vulnerability Assessment Reports

• Security Questionnaires

• Business Continuity Plans (BCP)

• Disaster Recovery (DR) Documentation

• Experience with risk assessment methodologies, risk scoring techniques, control frameworks, and risk remediation processes.

• Experience in audit management, compliance assessments, control reviews, and regulatory compliance activities.

• Ability to identify, assess, document, and monitor vendor, operational, cyber, and compliance risks.

• Strong analytical, communication, documentation, presentation, and stakeholder management skills.

• Experience preparing risk reports, governance dashboards, metrics, and Key Risk Indicators (KRIs).

Preferred candidate profile

• Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, or related field.
• 48 years of experience in TPRM, Vendor Risk Management, Cybersecurity, GRC, Audit, or Compliance functions.