Role & responsibilities

- Third-Party Risk Management (TPRM)

- Vendor Risk Assessment (VRA)
- Governance, Risk & Compliance (GRC)

- Cybersecurity Risk Management

- Information Security Controls
- Data Privacy & Protection

- Regulatory Compliance

- Information Security Governance
- Strong knowledge of security, risk, and compliance frameworks including:

- ISO 27001

- NIST Cybersecurity Framework (CSF)

- COBIT

- SOC 2
- PCI-DSS
- GDPR and Data Privacy requirements
- RBI/SEBI Regulatory Guidelines (where applicable)

- Experience reviewing
- SOC 1 / SOC 2 Reports
- ISO 27001 Certifications and Audit Reports
- Penetration Testing and Vulnerability Assessment Reports

- Security Questionnaires

- Business Continuity Plans (BCP)

- Disaster Recovery (DR) Documentation
- Experience with risk assessment methodologies, risk scoring techniques, control frameworks,



and risk remediation processes.
- Experience in audit management, compliance assessments, control reviews, and regulatory compliance activities.
- Ability to identify, assess, document, and monitor vendor, operational, cyber, and compliance risks.
- Robust analytical, communication, documentation, presentation, and stakeholder management skills.
- Experience preparing risk reports, governance dashboards, metrics, and Key Risk Indicators (KRIs).

Preferred candidate profile

- Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, or related field.
- 48 years of experience in TPRM, Vendor Risk Management, Cybersecurity, GRC, Audit, or Compliance functions.

📌 TPRM & GRC Specialist (Gurugram)
🏢 home credit
📍 Gurugram