Third Party Risk Management & Operational Risk

Crescendo Global Leadership Hiring India; Pune District, Mumbai, Delhi; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Crescendo Global is seeking a Senior Analyst for Third Party Risk Management & Operational Risk. The role covers TPRM, vendor risk assessments, and broader non-financial risk engagements for global financial clients.

Ideal candidates bring 3–6 years of risk advisory experience, familiarity with ISO 27001/NIST, and strong analytical, communication, and client-management skills. Mumbai-based with global exposure.

Qualifications

• 3–6 years in TPRM/Vendor Risk/Operational Risk or related fields.
• Exposure to ISO 27001, NIST, SOC and CIS Controls preferred.
• Experience in consulting/financial services risk advisory is desirable.

Responsibilities

• Support delivery of TPRM engagements for financial institutions.
• Conduct third‑party risk assessments, vendor due diligence and control reviews.
• Assess vendor security and technology controls against recognized frameworks.
• Contribute to Operational Risk engagements including RCSA and data governance.
• Develop client deliverables: risk assessments, presentations and proposals.
• Support workshops, RFPs, and practice-building initiatives.
• Stay updated on evolving regulatory expectations and risk trends.

Skills

Third Party Risk Management

Vendor Risk

Operational Risk

RCSA

Technology Risk

Cyber Risk

Data Governance

Communication

Client Management

Education

Bachelor's or Master's degree in Finance, Business, Economics, Engineering, CS/IT

Job description

Senior Analyst Third Party Risk Management & Operational Risk 3–6 Years

Summary

We are looking for an experienced Third Party Risk Management / Operational Risk professional to join the risk advisory team of a leading global consulting and financial services organization. The role will involve working on Third Party Risk Management (TPRM), Vendor Risk Management and broader Operational / Non-Financial Risk engagements for global financial services clients.

The ideal candidate should have strong expertise in Third Party Risk Management, Vendor Risk, Operational Risk, RCSA and Risk & Controls. Candidates with experience in Technology Risk, Cyber Risk, Data Governance, Operational Resilience and relevant risk frameworks such as ISO 27001, NIST, SOC and CIS Controls will also be considered.

Location-

Mumbai

Your Future Employer-

Our client is a leading global analytics, consulting and risk advisory organization working with financial institutions and businesses across markets. The organization delivers solutions across risk management, regulatory transformation, technology risk, operational risk and financial services consulting.

Responsibilities

1. Support the delivery of Third Party Risk Management (TPRM) engagements for leading financial institutions.
2. Conduct third-party risk assessments, vendor due diligence, control reviews and framework assessments.
3. Assess vendor security and technology control environments against recognized frameworks such as ISO 27001, NIST, SOC Reports and CIS Controls.
4. Contribute to broader Operational Risk and Non-Financial Risk engagements, including RCSA, Controls, Technology Risk, Cyber Risk, Data Governance, Data Lineage and Operational Resilience.
5. Develop high-quality client deliverables including risk assessment reports, executive presentations, proposals and solution documents.
6. Support client workshops, stakeholder discussions, RFP responses, proposal development and practice-building initiatives.
7. Stay updated on evolving regulatory expectations, risk frameworks and industry trends impacting Third Party Risk and Operational Risk.

Requirements

1. 3–6 years of relevant experience in Third Party Risk Management, Vendor Risk Management, Operational Risk, Technology Risk, Cyber Risk or Information Security.
2. Strong hands-on experience in Third Party Risk Management / Vendor Risk Management / Third Party Risk Assessments is preferred.
3. Good understanding of Operational Risk, Risk & Control Self Assessments (RCSA), risk controls and control frameworks.
4. Working knowledge of ISO 27001, NIST, SOC Reports and CIS Controls.
5. Experience within consulting, financial services, banking or risk advisory environments is preferred.
6. Exposure to Technology Risk, Cyber Risk, Data Governance, Data Lineage or Operational Resilience will be an advantage.
7. Strong analytical, problem-solving, communication and client-management skills.
8. Bachelor's or Master's degree in Finance, Business, Economics, Engineering, Computer Science, IT or another relevant discipline.
9. Certifications such as CISA, CISM, CISSP, CRISC, CCSP or ISO 27001 will be an advantage.

What Is in It for You?

• Opportunity to work on global Third Party Risk Management and Operational Risk engagements.
• Exposure to leading financial institutions and global risk management frameworks.
• Opportunity to work across TPRM, Vendor Risk, Technology Risk, Cyber Risk and Non-Financial Risk domains.
• Build expertise in the rapidly evolving Risk Advisory, Regulatory and Operational Risk landscape.
• Work closely with global clients and cross-functional risk, technology and business teams.

Disclaimer –

Crescendo Global does not discriminate on the basis of race, religion, color, origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Note –

We receive a large number of applications daily, making it difficult to respond to every applicant. Please assume that your profile has not been shortlisted if you do not hear from us within one week. Your patience is highly appreciated.

Scammers can misuse Crescendo Global's name for fake job offers. We never ask for money, purchases, or system upgrades. Verify all opportunities through Crescendo Global's official channels and report fraud immediately. Stay Alert!

Profile Keywords

Third Party Risk Management, TPRM, Third Party Risk, Vendor Risk Management, Vendor Risk, Supplier Risk Management, Vendor Due Diligence, Third Party Risk Assessment, Operational Risk, Non-Financial Risk, NFR, RCSA, Risk Control Self Assessment, Risk & Controls, Technology Risk, Cyber Risk, Information Security Risk, Data Governance, Data Lineage, Operational Resilience, Regulatory Risk, ISO 27001, NIST, SOC Reports, SOC 1, SOC 2, CIS Controls, CISA, CISM, CISSP, CRISC, CCSP, Risk Advisory, Risk Consulting, Financial Services Risk, Banking Risk, Mumbai Jobs, Third Party Risk Jobs, Vendor Risk Jobs, Operational Risk Jobs, TPRM Jobs, Risk Advisory Jobs.