Roles and responsibilities

1. Lead and Perform Vendor Onboarding Assessments

- Lead pre-assessment calls and coordinate assessment activities with stakeholders.

- Perform end-to-end vendor assessments and provide periodic assessment status updates.

- Conduct post-assessment calls and drive assessment closure.

1. Assessment Management and Documentation

- Create and manage Report IDs on the Archer Portal.

- Maintain assessment trackers and ensure timely completion and closure of assigned assessments.

1. POC and Assessment Tool Evaluation

- Perform Proof of Concept (POC) activities for recent assessment tools and platforms onboarded for TPRM activities. (will be applicable if new tools are being onboarded- currently for two tools POC is being done)

1. Agreement Review

- Review vendor agreements and contractual documents from an information security and compliance perspective.

1. PCI DSS and DL-SAR Assessments

- Perform PCI DSS and DL-SAR assessments as per the bank-approved checklists and applicable requirements.

- Review PCI DSS AOC, COC and ROC documents, where provided by the vendor/client.

- Review DL-SAR certificates and supporting documentation, where applicable.

1. AI Assessments





- Lead and perform AI assessments based on applicable bank requirements and assessment criteria.

- Perform AI Impact Assessments, where applicable.

1. Project and Stakeholder Management

- Manage assessments/projects end-to-end, including maintaining trackers, monitoring timelines and coordinating with stakeholders.

- Prepare and share periodic/monthly assessment status updates with stakeholders.

1. Regulatory and Checklist Review

- Review and update assessment checklists based on applicable regulatory circulars, guidelines and industry best practices.

1. VRA Report Review

- Perform VRA report reviews against defined checklists and assessment requirements.

- Identify and communicate report discrepancies to the respective auditor for resolution.

- Update review comments in the internal portal and maintain supporting soft evidence for audit and regulatory requirements, including RBI audits.

1. Other Responsibilities

- Perform miscellaneous tasks, documentation and review activities assigned by SPOC.

- Supporting Peers in case of assessments road-blockers.

📌 TPRM Consultant (Mumbai)
🏢 protiviti india
📍 Mumbai