About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business setting.

Key Responsibilities:

- Lead functional design and implementation of Third-Party Risk Management solutions, primarily on GRC platforms such as ServiceNow, OneTrust, Process Unity, Archer Etc.
- Translate business requirements into functional specifications for TPRM processes, including onboarding, inherent risk assessment, due diligence, control assessments, continuous monitoring, and offboarding.
- Collaborate with technical developers, risk domain teams, and stakeholders to ensure functional configurations align with policy, risk methodology, and compliance obligations.
- Drive workshops with clients or internal teams to gather and validate requirements.
- Contribute to the configuration of questionnaires, risk scoring logic, risk tiering models, and reporting dashboards.
- Assist in the development and review of documentation including Business Requirements Documents (BRD), Functional Specifications Documents (FSD), test scripts, and user guides.
- Provide support during UAT and post-go-live stabilization.




- Ensure TPRM implementations meet regulatory standards such as DORA, EBA Guidelines, RBI Master Directions, ISO 27001, or NIST.
- Identify opportunities to optimize and enhance TPRM processes using integrations with risk intelligence feeds.

Required Qualifications:

- Bachelor’s/Masters degree in Information Security, Business Administration, or related field.
- 7+ years of experience in Third-Party Risk Management, with at least 2–3 years in a functional implementation role.
- Proven experience implementing TPRM solutions using ServiceNow (or similar GRC platforms like OneTrust, Process Unity, Archer).
- Strong knowledge of third-party risk lifecycle stages and regulatory frameworks relevant to TPRM.
- Experience creating and configuring risk assessments, scoring models, workflows, and reporting tools.
- Ability to communicate effectively with both technical and non-technical stakeholders.
- Excellent analytical, documentation, and stakeholder management skills.

Preferred Qualifications:

- Experience in delivering or supporting TPRM managed services or SaaS TPRM solutions.
- Familiarity with continuous third-party risk monitoring concepts and integrations with external threat intelligence platforms.
- Exposure to industry-specific TPRM frameworks (e.g., financial services, healthcare, etc.)

Equal employment opportunity information:

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

📌 TPRM GRC Implementation (Manager) (Bengaluru)
🏢 KPMG India
📍 Bengaluru