Roles and responsibilities:

1. Lead and Perform Vendor Onboarding Assessments
- Lead pre-assessment calls and coordinate assessment activities with stakeholders.
- Perform end-to-end vendor assessments and provide periodic assessment status updates.
- Conduct post-assessment calls and drive assessment closure.

- Assessment Management and Documentation

- Create and manage Report IDs on the Archer Portal.
- Maintain assessment trackers and ensure timely completion and closure of assigned assessments.

- POC and Assessment Tool Evaluation

- Perform Proof of Concept (POC) activities for recent assessment tools and platforms onboarded for TPRM activities. (will be applicable if new tools are being onboarded- currently for two tools POC is being done)

- Agreement Review

- Review vendor agreements and contractual documents from an information security and compliance perspective.

- PCI DSS and DL-SAR Assessments

- Perform PCI DSS and DL-SAR assessments as per the bank-approved checklists and applicable requirements.
- Review PCI DSS AOC, COC and ROC documents, where provided by the vendor/client.
- Review DL-SAR certificates and supporting documentation, where applicable.

- AI Assessments





- Lead and perform AI assessments based on applicable bank requirements and assessment criteria.
- Perform AI Impact Assessments, where applicable.

- Project and Stakeholder Management

- Manage assessments/projects end-to-end, including maintaining trackers, monitoring timelines and coordinating with stakeholders.
- Prepare and share periodic/monthly assessment status updates with stakeholders.

- Regulatory and Checklist Review

- Review and update assessment checklists based on applicable regulatory circulars, guidelines and industry best practices.

- VRA Report Review

- Perform VRA report reviews against defined checklists and assessment requirements.
- Identify and communicate report discrepancies to the respective auditor for resolution.
- Update review comments in the internal portal and maintain supporting soft evidence for audit and regulatory requirements, including RBI audits.

- Other Responsibilities

- Perform miscellaneous tasks, documentation and review activities assigned by SPOC.
- Supporting Peers in case of assessments road-blockers.

📌 TPRM Consultant (Mumbai)
🏢 protiviti india
📍 Mumbai