Third-Party Risk Management Sr. Associate

Huron; Bengaluru; Presencial; INR 900 000 - 1 800 000; Tempo integral

Resumo da oferta

Huron is seeking a diligent professional to manage vendor risk assessments and support governance, risk, and compliance initiatives. You will review security controls of third-party vendors, document findings, and collaborate with Procurement, Legal, and business units to drive risk decisions.

The role requires strong writing and communication skills to distill complex findings for non-technical stakeholders, plus the ability to handle multiple vendor reviews with meticulous detail.

Qualificações

• 3-5+ years of experience in third-party risk management or related security/compliance role.
• Undergraduate degree in Information Security, IT, IS, or related discipline.

Conhecimentos

Vendor risk management

GRC

Information security basics

Security frameworks

Communication skills

Stakeholder management

Documentation/writing

Formação académica

Undergraduate degree in Information Security / IT / IS

Ferramentas

ServiceNow

OneTrust

Archer

ProcessUnity

Descrição da oferta de emprego

Qualifications

• 3-5+ years of experience in third-party risk management, vendor security assessment, GRC, or a related security or compliance role.
• Undergraduate degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline.
• Working knowledge of common security frameworks and evidence types (e.g., SOC 2, ISO 27001, NIST) as they apply to vendor assessment.
• Strong written communication skills, with the ability to summarize technical findings for a non-technical audience.
• Excellent organizational skills, with the ability to manage a high volume of concurrent vendor reviews and track detail accurately.
• Customer-oriented approach, comfortable working directly with vendors and internal stakeholders across Procurement, Legal, and the business.

Preferred Skills

• Experience with third-party risk management or GRC platforms (e.g., ServiceNow, OneTrust, Archer, ProcessUnity).
• Security certifications such as CTPRP, CISA, CRISC, or similar preferred.
• Familiarity with data privacy and regulatory requirements relevant to vendor relationships.
• Experience with Smartsheet, MS Project, SharePoint, or similar tools for tracking and reporting.
• Analytical problem-solving skills, including the ability to synthesize risk data into a format that supports decision-making.