Third-Party Risk Management

Live Connections

Bengaluru

Remote

INR 1,500,000 - 2,500,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

A leading recruitment agency is seeking a Manager for Information Security (Third-Party Risk Management) to enhance the TPRM framework and manage risks associated with suppliers. The ideal candidate will have 15-20 years of experience, relevant certifications, and strong communication skills. This full-time position is remote, offering a chance to work on impactful security projects.

Qualifications

15–20 years of experience in Information Security or related fields.
Proven experience in building and implementing TPRM programs.
Strong verbal and written communication skills.

Responsibilities

Enhance and mature the Information Security TPRM framework.
Develop strategies to manage high-risk supplier risks.
Oversee security risk assessments and business impact analyses.

Skills

Third-Party Risk Management (TPRM)

Information Security Governance

OneTrust Platform

Regulatory Compliance & Policy Enforcement

Strong Stakeholder Management

Education

Bachelor’s degree in Computer Science, Engineering, or a related field

Professional certifications: CISA, CRISC, CISM, CISSP

Tools

OneTrust

Job description

Position: Manager – Information Security (Third-Party Risk Management)

Experience: 15–20 Years

Work Mode: Remote

Educational Qualifications / Certifications

Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).
Professional certifications preferred: CISA, CRISC, CISM, or CISSP (one or more).
Strong verbal and written communication skills.
Excellent organizational skills with a self-motivated learning mindset.
Proven hands-on experience in building and implementing Information Security Third-Party Risk Management programs.

Roles and Responsibilities

Enhance and mature the Information Security Third-Party Risk Management (TPRM) framework, including developing and defining risk appetite.
Develop and implement effective strategies to manage and mitigate risks associated with high-risk suppliers.
Oversee and perform security risk assessments, business impact analyses, and security control evaluations across third-party vendors using OneTrust.
Maintain a comprehensive risk register within OneTrust to track and monitor identified risks.
Provide oversight for supply chain security assessment remediation, and facilitate the creation of CUECs to define shared responsibility models.
Review and advise on client MSA security terms and conditions, partnering with the legal team.
Ensure compliance with firm-wide information security policies and regulatory requirements.
Collaborate with stakeholders across lines of defense to review and refine assessment results.
Establish and maintain robust risk reporting and escalation processes.
Stay updated on emerging threats, best practices, and relevant security legislation.
Partner effectively with internal and external stakeholders to address security concerns impacting the business.
Contribute to developing scalable tools and models that enhance decision-making efficiency and accuracy.
Gather feedback from stakeholders to improve and evangelize the third‑party risk management program.
Prepare concise and meaningful risk assessment reports and dashboards for leadership.
Lead the creation and presentation of deep-dive reports and responses for senior executives.