We use cookies for the best user experience on our website, including to personalize content & offerings, to provide social media features and to analyze traffic. By clicking “Accept All Cookies” you agree to our use of cookies. You can also manage your cookies by clicking on the "Cookie Preferences" and selecting the categories you would like to accept. For more information on how we use cookies please visit our and Modify Cookie Preferences

Reject All Cookies Accept All Cookies

Track Manager - Operational Risk, SAP Security

India

Job Description

Track Manager - Operational Risk, SAP Security

Chennai, Tamil Nadu

Job Summary

The TPRM Analyst will be responsible for supporting the organization's third-party risk management program by identifying, assessing, monitoring, and reporting risks associated with vendors, suppliers, service providers, and other third-party relationships. The role requires collaboration with internal stakeholders such as Information Security, Legal, Compliance, Procurement, Business Owners, and Vendor Management teams to ensure third-party engagements meet the organization's risk, security, privacy, regulatory, and operational standards.

Key Responsibilities

- Conduct third-party risk assessments during vendor onboarding, renewal, and periodic review cycles.
- Evaluate vendor responses to due diligence questionnaires and validate supporting evidence such as SOC reports, ISO certifications, penetration test summaries, business continuity plans, and security policies.
- Assess risks across information security, data privacy, regulatory compliance, operational resilience, financial stability, and business continuity domains.
- Assign and maintain vendor risk ratings based on established risk assessment methodologies and control frameworks.
- Identify control gaps, document findings, and work with vendors and internal stakeholders to track remediation plans through closure.
- Support contract and agreement reviews by identifying risk-related requirements such as audit rights, breach notification timelines, data protection provisions, service levels, and subcontractor controls.
- Maintain accurate third-party inventory records, risk registers, assessment documentation, and audit-ready evidence.
- Prepare dashboards, scorecards, and reports on vendor risk posture, assessment status, open issues, and remediation progress.
- Monitor third-party risk signals, including vendor incidents, changes in services, subcontractor usage, regulatory issues, and control changes.
- Participate in internal audits, regulatory reviews, and governance meetings related to third-party risk management.
- Contribute to the continuous improvement of TPRM policies, procedures, templates, workflows, and reporting practices.

Skill Requirements

1. Advanced Proficiency In Regulatory Compliance Management, Including Sox, Gdpr, And Other Relevant Frameworks.
2. Excellent Skills In Operational Risk Management, Process Optimization,



And Incident Response Within Sap Landscapes.
3. Solid Leadership In Mentoring Teams On Sap Grc Best Practices And ComplianceDriven Operations.
4. Advanced Understanding Of Sap Authorization Concepts, Audit Controls, And Segregation Of Duties (Sod).
5. Excellent Communication And Stakeholder Management Skills.

Other Requirements

1. Optional but valuable: SAP Certified Technology Associate � SAP

- Vendor risk assessment and due diligence
- Risk identification, analysis, scoring, and reporting
- Information security and data privacy awareness
- Third-party lifecycle management
- Stakeholder coordination and vendor communication
- Audit readiness and evidence management
- Remediation tracking and issue management
- Strong written and verbal communication
- Attention to detail and ability to translate technical risks into business impact

Success Measures
- Timely completion of vendor risk assessments within defined SLAs.
- Accurate vendor risk ratings and well-documented assessment outcomes.
- Effective tracking and closure of risk remediation actions.
- Improved visibility into third-party risk posture through clear reporting and dashboards.
- Strong collaboration with business, procurement, legal, compliance, information security, and vendor teams.

System Security and Authorizations
2. Optional but valuable: SAP Certified Application Associate � SAP Access Control
3. Optional but valuable: ISACA Certified in Risk and Information Systems Control (CRISC

Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Copyright © 2026 HCL Technologies Limited

×

Cookie Consent Manager

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies.



However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Required Cookies

These cookies are required to use this website and can't be turned off.

Required Cookies

Show More Details

Required Cookies Provider Description Enabled
SAP as service provider

We use the following session cookies, which are all required to enable the website to function:

- "route" is used for session stickiness
- "careerSiteCompanyId" is used to send the request to the correct data center
- "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
- "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Cookies from provider SAPasserviceprovider are required and cannot be turned off

Functional Cookies

These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies.

Consent to all Functional Cookies

Show More Details

Functional Cookies Provider Description Enabled
Vimeo

Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos.

Consent to cookies from provider Vimeo

YouTube

YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos.

Consent to cookies from provider YouTube

Advertising Cookies

These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.

Consent to all Advertising Cookies

Show More Details

Advertising Cookies Provider Description Enabled
Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.

Consent to cookies from provider GoogleAnalytics

Google Tag Manager

Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing, and more.

Consent to cookies from provider GoogleTagManager

LinkedIn

LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn.

📌 Track Manager - Operational Risk, SAP Security (India)
🏢 HCLTech
📍 India