About this role
Job Description: Digital Risk Consultant – Third-Party Risk Management (TPRM)
Location: Bengaluru / Hyderabad Experience: 5 - 9 years Position: Intermediate / Senior Level Employment Type: Full-Time
Job Summary
We are looking for an experienced Digital Risk Consultant specializing in Third-Party Risk Management (TPRM) and Cybersecurity Risk Assessment. The ideal candidate will have hands-on experience in evaluating vendor security risks, conducting third-party cybersecurity assessments, and performing continuous security monitoring.
The candidate should be familiar with security rating platforms, external attack surface monitoring, cybersecurity frameworks, and vendor risk remediation processes.
Key Responsibilities
- Conduct cybersecurity and information security risk assessments of third-party vendors, suppliers, and service providers.
- Perform vendor security assessments and evaluate their overall cybersecurity posture.
- Administer and monitor security rating platforms such as BitSight, SecurityScorecard, RiskRecon, and Radar.
- Investigate, analyse, and triage cyber risk alerts generated through external attack surface management and security monitoring platforms.
- Identify changes in vendor security posture and assess their potential business impact and risk exposure.
- Participate in and coordinate third-party cybersecurity incident response activities.
- Evaluate security, privacy, governance, compliance, and operational risks associated with AI-enabled vendors and technologies.
- Identify significant security gaps, escalate critical findings, and coordinate remediation activities with vendors and internal stakeholders.
- Track vendor remediation plans and commitments through closure.
- Ensure appropriate risk documentation, reporting, and risk disposition.
Must-Have Skills
- Strong experience in Third-Party Risk Management (TPRM).
- Hands-on experience in vendor cybersecurity and information security risk assessments.
- Knowledge of security rating and continuous monitoring platforms:
- BitSight
- SecurityScorecard
- RiskRecon
- Radar
- Experience in External Attack Surface Management (EASM) and threat monitoring.
- Understanding of third-party cybersecurity incident response.
- Knowledge of cybersecurity frameworks and standards:
- NIST Cybersecurity Framework (NIST CSF)
- NIST AI Risk Management Framework (NIST AI RMF)
- ISO 27001
- FFIEC
- SOC Reporting
Good-to-Have Skills
- Experience in AI-enabled vendor risk evaluation.
- Exposure to cybersecurity threat intelligence and external risk monitoring.
- Knowledge of vendor remediation and risk governance processes.
- Experience working with enterprise risk management and compliance teams.
Educational Qualifications
- Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or a related discipline.
- Equivalent relevant professional experience will also be considered.
Must-have skills
Third-Party Risk Managementvendor cybersecurity risk assessmentinformation security risk assessment
Good-to-have skills
AI-enabled vendor risk evaluationcybersecurity threat intelligenceexternal risk monitoring
Hide
Apply for this jobSave
Similar jobs
- TiAssociate – Data Privacy Time Hack ConsultingBengaluru · 3 - 8 yrs · ₹8 - 14 LPA
- PaSenior Associate AttorneyParadigm ShiftersBangalore · 4 - 8 yrs
- Senior Compliance SpecialistNeemtreeAbu Dhabi · 5 - 8 yrs
- elSecurity & Compliance Engineerellow.ioRemote (India) · 5 - 10 yrs · ₹10 - 20 LPA
- HuLegal OfficerHuman CapitalistsMaharashtra · 5 - 10 yrs · ₹10 - 20 LPA
- SpSenior Associate - Compliance and AuditSportz InteractiveMumbai · 2 - 4 yrs
- MiVP Regulatory ReportingMirusMumbai · 4 - 14 yrs · ₹12 - 28 LPA
- Legal AssociateWeekday Partner NetworkRemote (India) · 5 - 9 yrs · ₹30 - 40 LPA
- InGeneral Manager Regulatory AffairsIndusion ConsultingMumbai · 12 - 18 yrs · ₹50 - 70 LPA
- MiCS HeadMillenium SemiconductorsPune · 15 - 25 yrs · ₹40 - 80 LPA
- Bank Treasury Regulatory Reporting AnalystWeekday Partner NetworkUS · 2 - 6 yrs · ₹12 - 100 LPA
- Company Secretaryconnectionsmumbai · 15 - 30 yrs · ₹25 - 50 LPA
peopleimpact hiring for Digital Risk Consultant