Job summary

Lead and execute third-party security risk assessments (onboarding reassessment and continuous monitoring) across domains such as cybersecurity compliance and operational risk.

Responsibilities

Perform detailed review and validation of third-party questionnaires evidence artifacts and supporting documentation provided by vendors and business units.

Analyze risk findings document assessment reports and maintain risk registers in tools such as ServiceNow (SNOW) or equivalent platforms.

Drive remediation management by tracking identified risks following up with stakeholders and ensuring timely closure of action items.

Engage with cross-functional stakeholders (Procurement Legal IT Business Units) to gather inputs and ensure risk alignment with organizational policies.





Support risk governance activities including preparing inputs for risk acceptance exception handling and escalation to governance forums.

Mentor junior analysts/associates and provide guidance on assessment quality evidence evaluation and TPSRM processes.

Prepare dashboards reports and executive summaries on vendor risk posture assessment status and key trends for leadership review.

Ensure compliance with internal policies regulatory requirements (e.g. ISO NIST DORA where applicable) and continuously track industry best practices.

Contribute to process improvements automation initiatives (e.g. ServiceNow workflows AI evaluators) and internal audit readiness activities.

Certifications Required

ISO 27001 CISA ISO 42001

📌 GIS Team Member (Chennai)
🏢 Cognizant
📍 Chennai