Third-Party Risk Management, Senior Associate

HEI Huron Eurasia India Private Limited; Karnataka; Presencial; INR 1.200.000 - 1.800.000; Tempo integral

Benefícios oferecidos por esta vaga

Medical insurance

Dental coverage

Vision coverage

401(k) plan

Stock purchase plan

Paid time off

Parental leave

Adoption assistance

Resumo da vaga

Huron Consulting Group is seeking a Senior Associate to advance its third‑party risk program in India. The role focuses on enhancing vendor risk practices, conducting security reviews, and guiding evidence collection to support procurement and legal reviews.

You will coordinate with Procurement and internal stakeholders to ensure rigorous yet timely due diligence, maintain audit‑ready records, and promote continual improvement across the vendor lifecycle.

Qualificações

• This role requires 3-5+ years in third‑party risk management or related security/compliance.
• Undergraduate degree in a relevant field is required.
• Working knowledge of SOC 2, ISO 27001, and NIST as applied to vendor assessment.
• Strong written communication with ability to summarize technical findings.
• Excellent organizational skills to manage a high volume of concurrent vendor reviews and track detail accurately.

Responsabilidades

• Vendor security reviews: implement process improvements and assess controls against third‑party risk standards.
• Questionnaires and evidence: administer security questionnaires and collect SOC 2 or ISO documentation.
• Remediation tracking: monitor remediation items, owners, and due dates to closure.
• Procurement due diligence support: assist with onboarding and security input for vendor contracts.

Conhecimentos

Vendor risk management

GRC practices

Security analysis

Written communication

Organization skills

Stakeholder collaboration

Formação

Bachelor's degree

Ferramentas

ServiceNow

OneTrust

Archer

ProcessUnity

Descrição da vaga

Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future. As a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results. Join our team and create your future. As Huron's vendor ecosystem grows, a Third-Party Risk Management Sr. Associate is needed to evaluate vendor security posture, keep evidence and remediation moving, and provide senior leadership, Procurement and our business stakeholders with a clear picture of third-party risk.

Description

This individual is responsible for enhancing Huron’s vendor risk management practices, while maintaining industry standards across vendor security reviews, managing security questionnaires and evidence collection, tracking remediation items to closure, and maintaining accurate third-party risk records. The role supports Procurement due diligence activities throughout the vendor lifecycle, from initial intake through renewal and offboarding, and works closely with vendors, internal stakeholders, and Procurement to keep reviews moving without compromising rigor. Strong attention to detail, clear written communication, and the ability to manage many concurrent reviews are essential.

Vendor security reviews

• Implement continual process improvement to existing vendor review practices.
• Conduct security reviews of prospective and existing vendors, evaluating controls against Huron's third-party risk standards.
• Assess vendor responses and supporting evidence to identify gaps, inconsistencies, and areas of elevated risk.
• Recommend risk ratings and escalated higher-risk vendors or unresolved gaps to security leadership.
• Support reassessment of existing vendors on a potential event-driven and time-based basis.

Questionnaires and evidence collection

• Administer security questionnaires, tailoring scope and depth to vendor risk tier and the data or systems involved.
• Collect, organize, and validate supporting evidence, including SOC 2 reports, certifications, policies, and other documentation.
• Follow up directly with vendor contacts to close information gaps and keep reviews on schedule.
• Maintain questionnaire templates and evidence standards, refining them as the program matures.

Remediation tracking and risk records

• Track remediation items identified during vendor reviews, ensuring owners, due dates, and status are current.
• Follow up with vendors and internal stakeholders to drive open remediation items to closure.
• Maintain the third-party risk register and supporting records, so vendor risk status is accurate and audit-ready at all times.
• Produce regular reporting on vendor review status, open remediation items, and overall third-party risk posture.

Procurement due diligence support

• Partner with Procurement throughout the vendor onboarding process, ensuring security due diligence is completed before contracts are finalized.
• Provide timely security input into procurement decisions, balancing risk rigor with business timelines.
• Support contract language reviews related to security and data protection requirements, in partnership with Legal.
• Help maintain a clear, consistent intake process for new vendor engagements across the business.

Qualifications

• 3-5+ years of experience in third‑party risk management, vendor security assessment, GRC, or a related security or compliance role.
• Undergraduate degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline.
• Working knowledge of common security frameworks and evidence types (e.g., SOC 2, ISO 27001, NIST) as they apply to vendor assessment.
• Strong written communication skills, with the ability to summarize technical findings for a non‑technical audience.
• Excellent organizational skills, with the ability to manage a high volume of concurrent vendor reviews and track detail accurately.
• Customer‑oriented approach, comfortable working directly with vendors and internal stakeholders across Procurement, Legal, and the business.

Preferred Skills

• Experience with third‑party risk management or GRC platforms (e.g., ServiceNow, OneTrust, Archer, ProcessUnity).
• Security certifications such as CTPRP, CISA, CRISC, or similar preferred.
• Familiarity with data privacy and regulatory requirements relevant to vendor relationships.
• Experience with Smartsheet, MS Project, SharePoint, or similar tools for tracking and reporting.
• Analytical problem‑solving skills, including the ability to synthesize risk data into a format that supports decision‑making.

Position Level Senior Associate Country India

At Huron, we’re redefining what a consulting organization can be. We go beyond advice to deliver results that last. We inherit our client’s challenges as if they were our own. We help them transform for the future. We advocate. We make a difference. And we intelligently, passionately, relentlessly do great work…together.

Are you the kind of person who stands ready to jump in, roll up your sleeves and transform ideas into action? Then come discover Huron. Whether you have years of experience or come right out of college, we invite you to explore our many opportunities. Find out how you can use your talents and develop your skills to make an impact immediately. Learn about how our culture and values provide you with the kind of environment that invites new ideas and innovation. Come see how we collaborate with each other in a culture of learning, coaching, diversity and inclusion. And hear about our unwavering commitment to make a difference in partnership with our clients, shareholders, communities and colleagues.

Huron Consulting Group offers a competitive compensation and benefits package including medical, dental, and vision coverage to employees and dependents; a 401(k) plan with a generous employer match; an employee stock purchase plan; a generous Paid Time Off policy; and paid parental leave and adoption assistance. Our Wellness Program supports employee total well-being by providing free annual health screenings and coaching, bank at work, and on-site workshops, as well as ongoing programs recognizing major events in the lives of our employees throughout the year. All benefits and programs are subject to applicable eligibility requirements.

Huron is fully committed to providing equal employment opportunity to job applicants and employees in recruitment, hiring, employment, compensation, benefits, promotions, transfers, training, and all other terms and conditions of employment. Huron will not discriminate on the basis of age, race, color, gender, marital status, sexual orientation, gender identity, pregnancy, national origin, religion, veteran status, physical or mental disability, genetic information, creed, citizenship or any other status protected by laws or regulations in the locations where we do business. We endeavor to maintain a drug‑free workplace.