Role & responsibilities
Third-Party Risk Management (TPRM)
Vendor Risk Assessment (VRA)
Governance, Risk & Compliance (GRC)
Cybersecurity Risk Management
Information Security Controls
Data Privacy & Protection
Regulatory Compliance
Information Security Governance
Solid knowledge of security, risk, and compliance frameworks including:
ISO 27001
NIST Cybersecurity Framework (CSF)
COBIT
SOC 2
PCI-DSS
GDPR and Data Privacy requirements
RBI/SEBI Regulatory Guidelines (where applicable)
Experience reviewing
SOC 1 / SOC 2 Reports
ISO 27001 Certifications and Audit Reports
Penetration Testing and Vulnerability Assessment Reports
Security Questionnaires
Business Continuity Plans (BCP)
Disaster Recovery (DR) Documentation
Experience with risk assessment methodologies, risk scoring techniques, control frameworks, and risk remediation processes.




Experience in audit management, compliance assessments, control reviews, and regulatory compliance activities.
Ability to identify, assess, document, and monitor vendor, operational, cyber, and compliance risks.
Robust analytical, communication, documentation, presentation, and stakeholder management skills.
Experience preparing risk reports, governance dashboards, metrics, and Key Risk Indicators (KRIs).

Preferred candidate profile
Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, or related field.
48 years of experience in TPRM, Vendor Risk Management, Cybersecurity, GRC, Audit, or Compliance functions.

📌 Tprm & Grc Specialist Gurugram
🏢 home credit
📍 Gurugram