Third Party Risk Management (TPRM) Analyst

Third Party Risk Management (TPRM) Analyst
22
Mumbai
Job Views:
Created Date: 2026-06-16
End Date: 2026-08-14
Experience: 2 - 3 years
Salary: 60000
Industry: Ed -Tech
Openings: 1
Primary Responsibilities :
Conduct third-party and vendor risk assessments to identify, evaluate, and mitigate potential risks associated with external service providers.
Perform vendor due diligence activities, including security questionnaire reviews, risk scoring, gap assessments, and control evaluations.
Review vendor compliance with industry standards and frameworks such as ISO 27001, SOC 2, GDPR, and other applicable regulatory requirements.
Track risk findings, remediation plans, action items, and follow up with vendors and internal stakeholders to ensure timely resolution.
Maintain TPRM documentation, risk registers, dashboards, reports, and support internal audits, compliance reviews, and regulatory assessments.
Experience Requirements:
Bachelor's Degree in Information Security, Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field.
2–3 years of experience in Third Party Risk Management (TPRM), Vendor Risk Management, Governance Risk & Compliance (GRC), or Information Security.
Strong understanding of risk management principles, vendor assessment methodologies, and third-party governance processes.
Working knowledge of ISO 27001, SOC 2, GDPR, and related compliance frameworks.
Experience with risk assessment tools, documentation management, reporting, and Excel-based risk tracking.