Third party Risk Audit

Protiviti India; Gurugram District; In loco; INR 1.200.000 - 2.000.000; Tempo pieno

Descrizione del lavoro

Protiviti India is seeking professionals for a Third Party Risk Audit focusing on cybersecurity risk assessments, control testing, and GRC reviews. The role involves analyzing vendor risk, identifying gaps, and preparing clear audit documentation.

You will work with stakeholders to track findings to closure and utilize Archer, ProcessUnity, and ServiceNow to manage evidence and remediation plans.

Competenze

• Experience conducting information security audits and risk assessments.
• Ability to test cybersecurity controls and review supporting evidence.
• Familiarity with GRC/TPRM tools and remediation workflows.
• Knowledge of regulatory/compliance frameworks such as ISO 27001 or equivalent.

Mansioni

• Perform Information Security and Cybersecurity audits and risk assessments.
• Test cybersecurity controls and review supporting evidence.
• Identify control gaps, red flags, audit findings, and remediation actions.
• Prepare clear audit documentation and reports.
• Work with stakeholders to track findings through closure.

Conoscenze

Information Security Audit

Cybersecurity Risk Assessment

Control Testing

Regulatory Compliance

Remediation

ISO 27001

CISA

Stakeholder Management

Strumenti

Archer

ProcessUnity

ServiceNow

Descrizione del lavoro

Third Party Risk Audit

with hands-on experience in cybersecurity risk assessments, control testing, compliance reviews, and GRC.

Key Responsibilities:

• Perform Information Security and Cybersecurity audits and risk assessments.
• Test cybersecurity controls and review supporting evidence.
• Identify control gaps, red flags, audit findings, and remediation actions.
• Prepare clear audit documentation and reports.
• Work with stakeholders to track findings through closure.
• Utilize GRC/TPRM tools such as Archer, ProcessUnity, and ServiceNow.

Key Skills / Requirements:

• Information Security Audit
• Cybersecurity Risk Assessment & Control Testing
• Archer, ProcessUnity, ServiceNow
• Gap Assessment & Remediation
• Knowledge of regulatory/compliance frameworks
• ISO 27001, CISA, or equivalent certification preferred
• Strong analytical, documentation, communication, and stakeholder-management skills