Role Overview

We are looking for a Business Analyst / PMO with experience in Third Party Risk Management (TPRM) to support the planning, execution, governance, and reporting of vendor risk management initiatives. The ideal candidate will work closely with business stakeholders, procurement teams, information security, and risk teams to ensure effective third-party risk governance and timely project delivery.

Key Responsibilities

- Support end-to-end Third Party Risk Management (TPRM) lifecycle, including onboarding, due diligence, risk assessments, monitoring, and remediation tracking.
- Gather, analyze, and document business requirements, functional specifications, and process flows.
- Coordinate with cross-functional stakeholders including Procurement, Legal, Compliance, Information Security, and Business Units.
- Track project milestones, deliverables, risks, issues, and dependencies.
- Prepare project plans, status reports, dashboards, RAID logs, and governance presentations.
- Monitor SLA adherence and ensure timely completion of third-party assessments.
- Support implementation and enhancement of TPRM processes and governance frameworks.
- Facilitate stakeholder meetings, document minutes, and track action items.
- Develop management reports and MIS dashboards for leadership review.
- Assist in audit requests and regulatory compliance activities related to third-party risk.
- Identify opportunities for process improvement and automation within TPRM operations.

Required Skills

- Robust understanding of Third Party Risk Management (TPRM) processes.




- Experience in Business Analysis and/or PMO activities.
- Knowledge of vendor risk assessment methodologies.
- Experience in requirement gathering, documentation, and stakeholder management.
- Proficiency in Microsoft Excel, PowerPoint, Word, and Project.
- Experience with reporting tools such as Power BI or Tableau is preferred.
- Strong analytical, communication, and presentation skills.
- Ability to manage multiple stakeholders and prioritize deliverables.

Preferred Knowledge

- Information Security and Risk Management concepts.
- Familiarity with frameworks such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or DORA.
- Experience with TPRM platforms such as OneTrust, Archer, ServiceNow VRM, ProcessUnity, RSA Archer, MetricStream, or similar tools.
- Understanding of ITGC, vendor due diligence, control assessments, and remediation tracking.

Qualifications

- Bachelor's degree in Engineering, Computer Science, Information Technology, Business Administration, or a related field.
- Relevant certifications such as PMP, PRINCE2, CBAP, CCBA, PMI-PBA, ISO 27001 Lead Implementer, CRISC, or CISA are preferred.

Good to Have

- Experience working in Banking, Financial Services, Consulting, or Large Enterprise environments.
- Exposure to Agile and Waterfall project methodologies.
- Experience in managing regulatory or compliance-driven projects.

Key Competencies

- Stakeholder Management
- Business Analysis
- Project Coordination
- Risk Management
- Vendor Management
- Problem Solving
- Communication & Presentation
- Process Improvement
- Governance & Reporting

📌 Business Analyst (Telangana)
🏢 Deloitte Shared Services India
📍 Telangana