Area(s) of ResponsibilityRequired Skills & Experience:

- 6+ years of experience in ThirdParty Risk Management, Vendor Risk, Cybersecurity Risk, IT Audit, or GRC roles.
- Robust understanding of the TPRM lifecycle and vendor risk frameworks.
- Handson experience with security assessments and control testing.
- Knowledge of cybersecurity concepts, access controls, incident response, and data protection.
- Excellent analytical, documentation, and stakeholder communication skills.
- Experience working with global vendors and crossregion stakeholders.

Key Responsibilities:

- Conduct inherent and residual risk assessments for vendors across cybersecurity, data privacy, operational, and compliance domains.
- Perform vendor due diligence during onboarding and periodic reviews.
- Review vendorprovided evidence (SOC reports, ISO 27001, SIG, penetration test summaries, etc.).
- Assess vendor alignment with security frameworks such as ISO 27001, NIST,



SOC 2, and HP internal security policies.
- Identify gaps, document findings, and recommend risk mitigation and remediation plans.
- Support compliance with global regulations (GDPR, data protection, internal audit requirements).
- Support the endtoend thirdparty lifecycle: onboarding, ongoing monitoring, issue management, and offboarding.
- Track vendor risks, remediation actions, and exceptions in GRC or risk management tools.
- Collaborate with Procurement, Legal, IT, Privacy, and Business stakeholders.
- Participate in internal audits, regulatory reviews, and risk governance forums.

Locations

- Country/Region: IN
- Requisition ID: 40496
- Work Model:
- Position Type:
- Salary Range:
- Location: INDIA - BENGALURU - HP

📌 Title: Third Party Risk Management-Subcontractor (Bengaluru)
🏢 Birlasoft
📍 Bengaluru