- Perform third-party/vendor risk assessments covering Information Security, Privacy, Business Continuity, Operational Risk, and Compliance domains.
- Review vendor security controls, policies, SOC reports, ISO 27001 certifications, penetration test reports, and other assurance artifacts.
- Assess inherent and residual risks associated with third-party engagements.
- Coordinate vendor due diligence activities and track remediation plans to closure.
- Support vendor onboarding and offboarding processes from a risk and compliance perspective.
- Maintain TPRM governance documentation, risk registers, exceptions, and control evidence.
- Monitor vendor performance, emerging risks, and compliance obligations throughout the vendor lifecycle.
- Collaborate with Procurement, Legal, Security, Privacy, Risk, and Business stakeholders.
- Prepare risk reports, dashboards, and executive summaries for management.




- Support audits, regulatory reviews, and customer assurance activities.

Required Skills & Experience
- Experience in Third Party Risk Management, Vendor Risk Management, Information Security Risk, or Governance, Risk & Compliance (GRC).
- Strong understanding of:
- NIST Cybersecurity Framework
- ISO 27001
- SOC 1 / SOC 2 Reports
- CIS Controls
- Privacy and Data Protection requirements
- Experience reviewing supplier security questionnaires and conducting risk assessments.
- Knowledge of cloud security concepts and third-party security controls.
- Robust analytical, documentation, and stakeholder management skills.
- Experience with risk management and GRC platformss

📌 Third Party Risk Management (Hyderabad)
🏢 Trigent Software
📍 Hyderabad