3PCRM ASSESSOR / SME

Live Connections Placements Pvt. Ltd.; Bengaluru; Vor Ort; INR 900.000 - 1.500.000; Vollzeit

Zusammenfassung

Live Connections Placements Pvt. Ltd. in Bengaluru is seeking a Third-Party Cybersecurity Risk Management (3PCRM) Assessor / SME to perform end-to-end risk assessments of third‑party vendors and service providers.

You will evaluate IAM, vulnerability management, incident response, data protection, cloud security, and monitoring, review SOC reports and certifications, and communicate findings to senior stakeholders. Relocation is acceptable.

Qualifikationen

• Experience in third‑party cybersecurity risk assessments (3PCRM/TPRM).
• Knowledge of cybersecurity frameworks and standards: NIST CSF, NIST SP 800-53, ISO 27001, PCI DSS, SOC 2, CSA.
• Expertise in security control validation, risk analysis, remediation.
• Experience reviewing security questionnaires and assessment evidence.
• Hands-on experience evaluating cloud security across AWS, Azure, or GCP.
• Strong governance, regulatory compliance, audit support, and risk reporting.
• Excellent stakeholder management and communication.
• Relevant ongoing cybersecurity certification such as CISA, CISSP, or equivalent.

Aufgaben

• Conduct end-to-end cybersecurity risk assessments of third-party vendors and service providers.
• Evaluate security controls across IAM, vulnerability management, incident response, data protection, cloud security, and monitoring.
• Review SOC reports, penetration test reports, security policies, architecture diagrams, and certifications.
• Assess inherent risk, control effectiveness, residual risk, and overall vendor security posture.
• Identify control gaps, document findings, recommend remediation, and validate closure.
• Perform security assessments for critical and high-risk third parties.
• Collaborate with vendor management, procurement, legal, technology, and risk stakeholders.
• Communicate assessment findings and residual risks to senior stakeholders.
• Maintain assessment documentation for audit and regulatory compliance.

Kenntnisse

3PCRM/TPRM experience

NIST CSF

NIST SP 800-53

ISO 27001

PCI DSS

SOC 2

Cloud security (AWS/Azure/GCP)

SOC reports review

Stakeholder management

CISA/CISSP ongoing

Jobbeschreibung

Job Title: Third-Party Cybersecurity Risk Management (3PCRM) Assessor / SME

Location: Bangalore (Relocation is acceptable)

Skill Level: SA / M / SM

Function: Cybersecurity / Third-Party Risk Management

Key Responsibilities

Conduct end-to-end cybersecurity risk assessments of third-party vendors and service providers.

Evaluate security controls covering IAM, vulnerability management, incident response, data protection, cloud security, and monitoring.

Review SOC reports, penetration test reports, security policies, architecture diagrams, and certifications.

Assess inherent risk, control effectiveness, residual risk, and overall vendor security posture.

Identify control gaps, document findings, recommend remediation, and validate closure.

Perform security assessments for critical and high-risk third parties.

Collaborate with vendor management, procurement, legal, technology, and risk stakeholders.

Communicate assessment findings and residual risks to senior stakeholders.

Maintain assessment documentation for audit and regulatory compliance.

Required Skills

Strong experience in Third-Party Cyber Risk Assessments (3PCRM / TPRM).

Knowledge of cybersecurity frameworks and standards: NIST CSF, NIST SP 800-53, ISO 27001, PCI DSS, SOC 2, and CSA.

Expertise in security control validation, risk analysis, risk treatment, and remediation.

Experience reviewing security questionnaires, SOC reports, and assessment evidence.

Hands-on experience evaluating cloud security across AWS, Azure, or GCP.

Knowledge of security governance, regulatory compliance, audit support, and risk reporting.

Strong stakeholder management and communication skills.

Relevant ongoing cybersecurity certification such as CISA, CISSP, or equivalent.

Contact: 9885271110