Role Summary
The role involves managing Information Security Governance, Risk, and Compliance (GRC) with a solid focus on Third‑Party / Vendor Risk Assessments. The incumbent will ensure that vendors, service providers, and partners comply with applicable regulatory, industry, and organizational information security requirements.

Key Responsibilities
Third‑Party Risk Management (TPRM)
Conduct end‑to‑end information security risk assessments of third parties, vendors, partners, service providers.
Perform inherent risk profiling and residual risk evaluation while vendors onboarding, renewals and periodic reassessments
Assist in updating Master Vendor Inventory as per service details and classification
Review vendor‑provided information, security questionnaires, and supporting evidence
Assess inherent security risks based on:
Nature of services provided
Type and sensitivity of data accessed, processed, or stored
Degree of system and network access
Regulatory and compliance impact
Assign inherent risk ratings (e.g., High / Medium / Low)



to new vendors as per the organization’s security risk framework
Identify key risk drivers and control gaps at the inherent risk stage
Document assessment results and rationale in the designated risk assessment template or system
Perform detailed security risk assessments of third parties based on profiling criteria defined in the organization’s Security Risk Assessment Framework, including evaluation of service criticality, data sensitivity, access levels, regulatory impact, and inherent risk factors, to determine overall risk classification and required risk treatment actions.
Coordinate with internal business stakeholders and vendor service owners to
Collect and validate details related to vendor services and engagement scope
Clarify data access, system integration, and service dependencies
Identify, escalate, and report any issues, gaps, or support requirements impacting the risk assessment
Provide periodic status updates on assess

📌 GRC - TPRM Specialis (Gurugram)
🏢 Soffit Infrastructure Services (P
📍 Gurugram