IT consulting (TPRM)

Infosys; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Infosys Bengaluru is seeking a cybersecurity professional with 2-4 years of hands-on experience in information security, third-party risk management and IT risk. You will assess vendor security postures, review questionnaires, and map controls to industry frameworks.

The role involves collaborating with security and risk teams, creating requirements, and supporting solution design and deployment across client engagements as part of the Infosys consulting team.

Qualifications

• 2-4 years of experience in Cybersecurity, Information Security, TPRM, or IT Risk.
• Hands-on vendor security risk assessments and gap identification.
• Knowledge of ISO 27001 / NIST / SOC 2 / PCI-DSS frameworks.
• Experience with risk registers, scoring, and remediation tracking.
• Familiar with GRC/TPRM tools is desirable.
• Strong analytical and stakeholder communication skills.

Responsibilities

• Support consulting team through problem definition, estimation, diagnosis, and design.
• Evaluate alternatives and build POCs based on research.
• Create requirement specs and define to-be processes.
• Assist in configuring solution requirements on products and diagnose issues.
• Contribute to unit-level and organizational initiatives.
• Help clients navigate their digital transformation journey.

Skills

Cybersecurity

TPRM

Vendor risk

Data privacy

Information security

Risk assessment

GRC tools

Stakeholder comms

Education

Master Of Engineering

Master Of Technology

Bachelor of Engineering

Bachelor Of Technology

Tools

ServiceNow GRC

Archer

OneTrust

ProcessUnity

Job description

Job Description

• 2-4 years of experience in Cybersecurity, Information Security, Third-Party Risk Management (TPRM), or IT Risk.
• Hands-on experience in conducting third-party/vendor security risk assessments and identifying security and compliance gaps.
• Good understanding of Information Security controls, Cyber Risk, Vendor Risk, and Data Privacy requirements.
• Experience reviewing vendor security posture through security questionnaires, evidence/document reviews, and risk assessments.
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, SOC 2, PCI-DSS, or related frameworks.
• Understanding of key cybersecurity areas including Identity Access Management, Data Protection, Network Security, Vulnerability Management, Incident Management, and Business Continuity.
• Experience in identifying, documenting, and tracking security risks, findings, exceptions, and remediation actions with third parties.
• Ability to assess inherent and residual risks associated with vendors/third-party services.
• Familiarity with risk registers, risk scoring, control assessments, and remediation tracking.
• Exposure to GRC/TPRM tools such as ServiceNow GRC, Archer, OneTrust, ProcessUnity, or similar platforms is desirable.
• Good analytical, documentation, and stakeholder communication skills for coordinating with vendors and internal security/risk teams.

Roles Responsibilities

• As part of the Infosys consulting team, your primary role would be to actively aid the consulting team in different phases of the project including problem definition, effort estimation, diagnosis, solution generation and design and deployment
• You will explore the alternatives to the recommended solutions based on research that includes literature surveys, information available in public domains, vendor evaluation information, etc. and build POCs
• You will create requirement specifications from the business needs, define the to-be-processes and detailed functional designs based on requirements.
• You will support configuring solution requirements on the products; understand if any issues, diagnose the root-cause of such issues, seek clarifications, and then identify and shortlist solution alternatives
• You will also contribute to unit-level and organizational initiatives with an objective of providing high quality value adding solutions to customers.
• If you think you fit right in to help our clients navigate their next in their digital transformation journey, this is the place for you!

Technical Requirement

• Ability to work with clients to identify business challenges and contribute to client deliverables by refining, analyzing, and structuring relevant data
• Awareness of latest technologies and trends
• Logical thinking and problem solving skills along with an ability to collaborate
• Ability to assess the current processes, identify improvement areas and suggest the technology solutions
• One or two industry domain knowledge

Additional Responsibility

• TPRM

Educational Requirement

• Master Of Engineering
• Master Of Technology
• Bachelor of Engineering
• Bachelor Of Technology

Preferred Skills

• Technology->IDAM->Ping One
• Technology->Identity Management->Identity/Account Provisioning and Reconciliation
• SPML->Ping Identity

Service Line

• Cyber Security