Manager - Third Party Security Risk Management

Cognizant; Chennai District; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Cognizant is seeking a Third Party Risk Management Manager to lead the enterprise-wide program, collaborating with Procurement, Legal, Compliance, Cybersecurity, and business stakeholders to identify, assess, monitor, and mitigate third-party risks.

You will drive governance, optimize risk processes, and support executive decision-making while fostering a risk-aware culture across the organization.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, Information Technology, Business Administration, or a related discipline.
• 9–12 years of experience in Third-Party Risk Management (TPRM), Vendor Risk Management, Information Security, Cybersecurity Risk, Compliance, Audit, or Enterprise Risk Management.
• Strong knowledge of third-party risk assessment methodologies, vendor due diligence processes, risk governance, and remediation management practices.
• Experience leading cross-functional initiatives and engaging with senior stakeholders to drive risk-based decision making.
• Professional certifications such as ISO 27001 and CISA.
• Proven experience managing audits, regulatory assessments, risk reporting, and governance activities.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.

Responsibilities

• Lead the development, implementation, and execution of third-party risk management frameworks, policies, and procedures across the organization.
• Oversee third-party risk assessments, vendor due diligence activities, continuous monitoring programs, and remediation efforts across cybersecurity, compliance, financial, and operational risk domains.
• Partner with Procurement, Legal, Compliance, and business stakeholders to align vendor risk practices with organizational objectives and regulatory requirements.
• Present risk findings, mitigation strategies, program metrics, and governance updates to senior leadership and risk committees.
• Drive program maturity through process improvements, risk tiering initiatives, KPI development, audit support, automation opportunities, and team leadership.

Skills

Third-party risk assessment

Vendor due diligence

Risk governance

Remediation management

Education

Bachelor's degree

Tools

GRC solutions

Workflow automation tools

Job description

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?

About the role

As a Third Party Risk Management Manager, you will lead the execution and continuous enhancement of the enterprise-wide third-party risk management program. You will be a key member of the risk management organization, collaborating with Procurement, Legal, Compliance, Cybersecurity, and business stakeholders to ensure third-party risks are effectively identified, assessed, monitored, and mitigated.

You will have the autonomy to drive strategic initiatives, strengthen governance frameworks, optimize risk processes, and support executive decision-making while fostering a proactive risk-aware culture across the organization.

In this role, you will:

• Lead the development, implementation, and execution of third-party risk management frameworks, policies, and procedures across the organization.


• Oversee third-party risk assessments, vendor due diligence activities, continuous monitoring programs, and remediation efforts across cybersecurity, compliance, financial, and operational risk domains.


• Partner with Procurement, Legal, Compliance, and business stakeholders to align vendor risk practices with organizational objectives and regulatory requirements.


• Present risk findings, mitigation strategies, program metrics, and governance updates to senior leadership and risk committees.


• Drive program maturity through process improvements, risk tiering initiatives, KPI development, audit support, automation opportunities, and team leadership.

What you must have to be considered

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, Information Technology, Business Administration, or a related discipline.


• 9–12 years of experience in Third-Party Risk Management (TPRM), Vendor Risk Management, Information Security, Cybersecurity Risk, Compliance, Audit, or Enterprise Risk Management.


• Strong knowledge of third-party risk assessment methodologies, vendor due diligence processes, risk governance, and remediation management practices.


• Experience leading cross-functional initiatives and engaging with senior stakeholders to drive risk-based decision making.


• Professional certifications such as ISO 27001 and CISA.


• Proven experience managing audits, regulatory assessments, risk reporting, and governance activities.


• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.


• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.

These will help you succeed

• Experience with third-party risk management platforms, governance, risk and compliance (GRC) solutions, and workflow automation tools.


• Knowledge of industry frameworks, regulatory standards, and emerging third-party risk management practices.


• Strong leadership, mentoring, stakeholder management, and executive communication skills.


• Experience establishing KPIs, dashboards, metrics, and reporting frameworks for risk programs.


• Ability to drive strategic initiatives such as vendor segmentation, risk tiering, process optimization, and automation of risk workflows.


• Continuous learning mindset with a focus on innovation, operational excellence, and risk program maturity.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a Cognizant office in Chennai, Coimbatore, or Bangalore. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs