Role & responsibilities

The Analyst/ Associate Consultant supports delivery of enterprise-wide Third-Party Risk Management (TPRM) engagements, focusing on execution support across the

end-to-end vendor lifecycle. The role emphasizes foundational cyber/ information security risk knowledge, documentation quality, communication clarity, and learning

agility. Prior deep TPRM experience is not mandatory.

Key Responsibilities
Support execution of end-to-end TPRM lifecycle activities, including vendor

onboarding risk assessments, periodic vendor reviews, continuous monitoring

activities
Assist in risk identification, risk assessment, and basic risk scoring across

information security risk, operational risk, business continuity risk
Review and analyze third-party artifacts, such as security policies and

procedures, ISO certifications and SOC reports, vendor documentation and

questionnaires
Support risk issue tracking, remediation follow-ups, and closure documentation
Assist in development and maintenance of TPRM policies and procedures, risk





assessment documentation, risk registers and reports
Coordinate with internal stakeholders and vendors to follow up on information

requests, support assessment timelines, clarify risk-related queries

Knowledge & Experience Requirements -

Mandatory
02 years of experience or exposure to:
Cybersecurity, information security, IT risk/ IT audit/ GRC
Foundational understanding of:
Risk management concepts
Difference between policy, standard, and procedure
Basic cyber/ information security concepts
Awareness of third-party risk management concepts, vendor risk and due

diligence principles (basics/ preliminary)
Solid written and verbal communication skills
Willingness to learn and adapt in a consulting setting
Exposure to or knowledge of vendor onboarding or due diligence activities
Exposure to or knowledge of business continuity concepts, continuous monitoring, risk reporting or documentation

📌 Tprm Consultant Bengaluru
🏢 CLARITY CONSULTING
📍 Bengaluru