Analyst - Third Party Technical Assurance

Apex Group Ltd (India Branch); Pune District; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

Apex Group Ltd (India Branch) seeks a seasoned professional with 5-7 years in third-party technical risk assurance within financial services to drive risk oversight of ICT providers and cloud services.

The role emphasizes embedding DORA clauses and international standards, enabling robust supplier controls and delivering clear risk narratives to support funding and prioritization.

Qualifications

• 5-7 years in third-party technical risk assurance/TPRM within financial services.
• Experience embedding DORA contractual clauses, GDPR DPAs, ISO/IEC 27001:2022, NIST CSF 2.0 outcomes, EU AI Act responsibilities, PCI DSS, COBIT governance, and ISO 31000 risk treatment.
• Exceptional communication, presentation, articulation, and stakeholder influence skills; effective at supplier engagement and executive reporting.

Responsibilities

• Lead third-party onboarding with complete due diligence and compliant contracts.
• Provide executive reporting and supplier risk insights to enable funding/prioritization and strategic decisions on vendors.

Skills

DORA clauses

GDPR DPAs

ISO/IEC 27001:2022

NIST CSF 2.0

EU AI Act

PCI DSS

COBIT governance

ISO 31000 risk treatment

Job description

5 - 7 years in third-party technical risk assurance/TPRM within financial services, including critical ICT providers and cloud services.

• Hands-on experience embedding DORA contractual clauses, GDPR DPAs, ISO/IEC 27001:2022, NIST CSF 2.0 outcomes, EU AI Act responsibilities, PCI DSS, COBIT governance, and ISO 31000 risk treatment.
• Exceptional communication, presentation, articulation, and stakeholder influence skills; effective at supplier engagement and executive reporting.

Success Indicators

• Third-party onboarding with complete due diligence and compliant contracts; clear risk decisions documented.
• Reduction in vendor-origin incidents and SLA breaches; timely breach notifications and effective remediation.
• Audit/regulator confidence in supplier controls; strong evidence quality and continuous monitoring performance.
• Clear TRF narratives enabling funding/prioritization and strategic decisions on vendors.