Role & responsibilities

- Manage end-to-end Third-Party Risk Management (TPRM) lifecycle including onboarding, due diligence, periodic reviews, and risk assessments.

- Conduct vendor risk evaluations aligned with frameworks like ISO 27001, NIST, SOC 2, and GDPR.

- Utilize TPRM platforms such as Archer, ProcessUnity, and MetricStream for assessments and reporting.

- Collaborate with internal teams and vendors to ensure compliance with enterprise risk frameworks.

- Lead vendor risk monitoring efforts through periodic reviews, risk scoring updates, and detection of emerging risks.

- Analyze financial, operational, and reputational risks associated with third-party engagements.

- Prepare risk reports, dashboards, and presentations for stakeholders.

- Support audit readiness activities and respond to internal and external audit queries related to third-party risk.

- Support client-facing engagements and ensure timely completion of risk reviews.

- Maintain trackers and documentation for all TPRM activities.

Qualifications:

- Bachelors degree in business, Information Technology, Risk Management, Finance,



or related field is mandatory; Masters degree or relevant certifications are strongly preferred

- 9+ years of experience in TPRM, vendor risk management, or related domains

- Solid understanding of third-party risk lifecycle management, enterprise risk management (ERM) concepts, risk frameworks and regulatory standards

- Hands-on knowledge of TPRM frameworks, risk assessment methodologies, and associated regulatory requirements (e.g., ISO 27001, SOC 2, NIST, GDPR, RBI Guidelines)

- Proven ability to conduct detailed vendor risk assessments, due diligence, and process improvement

- Experience with third-party risk management platforms (e.g., Aravo, RSA Archer, MetricStream) and proficiency in MS Office (Excel, PowerPoint, Word)

- Ability to manage multiple concurrent projects and work independently or as part of a team

- Provide strategic advice on TPRM program design and governance to senior leadership

- Experience in client-facing environments

- Certifications such as CTPRP, CISA, CRISC, or CISSP are preferred

Work Window: 12 noon - 12 midnight

📌 Manager - TPRM Role (Gurugram)
🏢 EXL
📍 Gurugram