:

Role : Digital Risk Consultant - Third-Party Risk Management (TPRM)

Location : Bengaluru / Hyderabad

Experience : 5+ Years

Position : Intermediate / Senior Level

Employment Type : Full-Time

Job Summary :

We are looking for an experienced Digital Risk Consultant specializing in Third-Party Risk Management (TPRM) and Cybersecurity Risk Assessment. The ideal candidate will have hands-on experience in evaluating vendor security risks, conducting third-party cybersecurity assessments, and performing continuous security monitoring.

The candidate should be familiar with security rating platforms, external attack surface monitoring, cybersecurity frameworks, and vendor risk remediation processes.

Key Responsibilities :

- Conduct cybersecurity and information security risk assessments of third-party vendors, suppliers, and service providers.
- Perform vendor security assessments and evaluate their overall cybersecurity posture.
- Administer and monitor security rating platforms such as BitSight, SecurityScorecard, RiskRecon, and Radar.
- Investigate, analyse, and triage cyber risk alerts generated through external attack surface management and security monitoring platforms.
- Identify changes in vendor security posture and assess their potential business impact and risk exposure.
- Participate in and coordinate third-party cybersecurity incident response activities.
- Evaluate security, privacy, governance, compliance,



and operational risks associated with AI-enabled vendors and technologies.
- Identify significant security gaps, escalate critical findings, and coordinate remediation activities with vendors and internal stakeholders.
- Track vendor remediation plans and commitments through closure.
- Ensure appropriate risk documentation, reporting, and risk disposition.

Must-Have Skills :

- Robust experience in Third-Party Risk Management (TPRM).
- Hands-on experience in vendor cybersecurity and information security risk assessments.
- Knowledge of security rating and continuous monitoring platforms : BitSight, SecurityScorecard, RiskRecon, Radar.
- Experience in External Attack Surface Management (EASM) and threat monitoring.
- Understanding of third-party cybersecurity incident response.
- Knowledge of cybersecurity frameworks and standards : NIST Cybersecurity Framework (NIST CSF), NIST AI Risk Management Framework (NIST AI RMF), ISO 27001, FFIEC, SOC Reporting.

Good-to-Have Skills :

- Experience in AI-enabled vendor risk evaluation.
- Exposure to cybersecurity threat intelligence and external risk monitoring.
- Knowledge of vendor remediation and risk governance processes.
- Experience working with enterprise risk management and compliance teams.

Educational Qualifications :

- Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or a related discipline.
- Equivalent relevant professional experience will also be considered.

📌 Digital Risk Consultant - Third-Party Risk Management (India)
🏢 PEOPLE IMPACT
📍 India