Role summary- You will support the execution of the organization’s Third-Party Risk Management (TPRM) program by conducting privacy due diligence assessments of vendors, identifying data privacy risks, ensuring compliance with applicable privacy laws and internal policies, and maintaining assessment documentation.

Key Responsibilities -

Conduct privacy risk assessments for third-party vendors during onboarding and periodic reviews.
Review vendor responses to privacy questionnaires and supporting evidences.
Assess vendors processing personal data against applicable privacy regulations (e.g., India’s Digital Personal Data Protection Act, 2023, General Data Protection Regulation where applicable).
Identify privacy risks, document observations, and recommend appropriate mitigation measures.
Track remediation actions and follow up with internal stakeholders and vendors until closure.
Maintain records of completed assessments, risk ratings, and supporting evidence.




Assist in developing and updating privacy assessment questionnaires, templates, and SOPs.
Support in audits and regulatory inspections by providing required privacy assessment documentation.
Prepare periodic MIS reports and dashboards on TPRM assessment status and key metrics.

Required skill -

Basic understanding of data privacy principles and regulations.
Knowledge of vendor risk assessment or Third-Party Risk Management concepts.
Positive analytical and documentation skills.
Strong communication and stakeholder coordination skills.
Proficiency in Microsoft Excel, Word, and PowerPoint.

Experience: 3-4 year (Freshers with relevant certifications and data privacy internship experience may also apply)

Education: Bachelor’s degree in law, Information Technology, Computer Science, Business, or related field.

📌 Team Member (Mumbai)
🏢 Yes Bank
📍 Mumbai