TPRM Consultant

Roles and responsibilities:

1. Lead and Perform Vendor Onboarding Assessments

• Lead pre-assessment calls and coordinate assessment activities with stakeholders.
• Perform end-to-end vendor assessments and provide periodic assessment status updates.
• Conduct post-assessment calls and drive assessment closure.

2. Assessment Management and Documentation

• Create and manage Report IDs on the Archer Portal.
• Maintain assessment trackers and ensure timely completion and closure of assigned assessments.

3. POC and Assessment Tool Evaluation

• Perform Proof of Concept (POC) activities for new assessment tools and platforms onboarded for TPRM activities. (will be applicable if new tools are being onboarded- currently for two tools POC is being done)

4. Agreement Review

• Review vendor agreements and contractual documents from an information security and compliance perspective.

5. PCI DSS and DL-SAR Assessments

• Perform PCI DSS and DL-SAR assessments as per the bank-approved checklists and applicable requirements.
• Review PCI DSS AOC, COC and ROC documents, where provided by the vendor/client.
• Review DL-SAR certificates and supporting documentation, where applicable.

6. AI Assessments

• Lead and perform AI assessments based on applicable bank requirements and assessment criteria.
• Perform AI Impact Assessments, where applicable.

7. Project and Stakeholder Management

• Manage assessments/projects end-to-end, including maintaining trackers, monitoring timelines and coordinating with stakeholders.
• Prepare and share periodic/monthly assessment status updates with stakeholders.

8. Regulatory and Checklist Review

• Review and update assessment checklists based on applicable regulatory circulars, guidelines and industry best practices.

9. VRA Report Review

• Perform VRA report reviews against defined checklists and assessment requirements.
• Identify and communicate report discrepancies to the respective auditor for resolution.
• Update review comments in the internal portal and maintain supporting soft evidence for audit and regulatory requirements, including RBI audits.

10. Other Responsibilities

• Perform miscellaneous tasks, documentation and review activities assigned by SPOC.
• Supporting Peers in case of assessments road-blockers.