Third-Party Risk Management (TPRM) Consultant

Tsaaro Consulting; Mumbai Suburban; On-site; INR 1,200,000 - 2,300,000; Full time

Benefits offered by this job

Hybrid work flexibility

Continuous learning support

Job summary

Tsaaro Consulting is seeking a Cyber GRC & Third-Party Risk Management (TPRM) Consultant in Mumbai. You will assess cyber risks, conduct vendor risk assessments, and support ISO 27001 and other security frameworks across client engagements.

You will collaborate with cross-functional teams to deliver practical, risk-based solutions, strengthen governance, and help clients build resilient cyber risk programs in a consulting setting.

Qualifications

• 2–4+ years of experience in Cyber GRC, TPRM, information security or cybersecurity consulting.
• Experience with vendor risk assessments and security reviews.
• Knowledge of ISO 27001, ISO 27701, NIST CSF, CIS Controls, SOC 2 or similar frameworks.
• Strong analytical, documentation and client communication skills.

Responsibilities

• Conduct end-to-end Third-Party Risk Management assessments across vendors and service providers.
• Perform vendor security reviews, due diligence, and security questionnaires.
• Evaluate third-party cybersecurity controls and identify gaps and mitigations.
• Develop and implement TPRM frameworks, policies, and procedures.
• Support GRC programs aligned with business objectives and regulatory requirements.
• Assist with risk assessments, control maturity, and compliance gap analyses.

Skills

Cyber GRC

TPRM

Information Security

Vendor risk assessment

ISO 27001

NIST CSF

SOC 2

CISA

CRISC

CISM

Job description

Third-Party Risk Management (TPRM) Consultant

Malad West, India | Posted on 07/24/2026

Join Tsaaro as a Cyber GRC & Third-Party RiskManagement (TPRM) Consultant

Drive Cyber Resilience. Build Trust. Deliver Impact.

Are you passionate about helping organizations strengthentheir cyber governance, manage third-party risks, and achieve compliance withglobal security standards?

At Tsaaro, we go beyond compliance, we help organizationsbuild resilient governance, risk, and compliance (GRC) programs that enablesecure business growth. We are looking for a Cyber GRC & Third-Party RiskManagement (TPRM) Consultant who thrives in consulting environments, enjoyssolving complex security challenges, and can deliver practical, risk-basedsolutions to clients.

At Tsaaro, privacy and cybersecurity are at the heart ofeverything we do. Our team of privacy consultants and cybersecurity specialistscollaborates to help organizations build robust governance frameworks,strengthen security programs, and manage evolving cyber risks.

Our consulting approach focuses on delivering practical,business-aligned solutions that help clients strengthen security posture,manage vendor risks, achieve compliance, and build long-term resilience.

Your Role: Cyber GRC & Third-Party Risk Management(TPRM) Consultant

As a Consultant, you will work closely with clients toestablish governance frameworks, assess cyber risks, conduct third-party riskassessments, and support compliance initiatives across multiple regulatory andindustry standards.

Key Responsibilities

• Conductend-to-end Third-Party Risk Management (TPRM) assessments across vendors,suppliers, and service providers.


• Performvendor security reviews, due diligence assessments, and securityquestionnaires.


• Evaluatethird-party cybersecurity controls and identify risks, gaps, andmitigation strategies.


• Developand implement Third-Party Risk Management frameworks, policies, andprocedures.


• Supportclients in implementing Governance, Risk & Compliance (GRC) programsaligned with business objectives.


• Performcyber risk assessments, control maturity assessments, and compliance gapanalyses.


• Assistclients in implementing and maintaining ISO 27001, ISO 27701, NIST CSF,CIS Controls, and other security frameworks.


• Supportaudit readiness initiatives including internal audits, control testing,and evidence collection.


• Developrisk registers, risk treatment plans, and executive reports.


• Collaboratewith cross-functional teams to improve governance processes and strengthenorganizational cyber resilience.


• Contributeto cybersecurity consulting engagements involving policy development,control implementation, and regulatory compliance.


• Providerecommendations for continuous improvement in vendor risk governance andcybersecurity practices.

Requirements

• 2–4+years of experience in Cyber GRC, Third-Party Risk Management (TPRM),Information Security, or Cybersecurity Consulting.


• Strongunderstanding of Third-Party Risk Management methodologies and vendor riskassessment processes.


• Hands-onexperience conducting vendor security assessments and reviewing securitycontrols.


• Workingknowledge of ISO 27001, ISO 27701, NIST CSF, CIS Controls, SOC 2, orsimilar security frameworks.


• Familiaritywith governance, risk management, compliance processes, and cybersecurityregulations.


• Experiencewith risk assessments, audit support, policy development, and controlimplementation.


• Excellentanalytical, documentation, stakeholder management, and clientcommunication skills.


• Professionalcertifications such as ISO 27001 Lead Implementer/Lead Auditor, CRISC,CISA, CISM, Security+, or similar are preferred.


• Acollaborative, solution-oriented mindset with the ability to managemultiple client engagements.


• Workwith one of India's fastest-growing privacy and cybersecurity consultingfirms.


• Gainexposure to global clients across diverse industries.


• Workon strategic Cyber GRC and Third-Party Risk Management engagements.


• Accelerateyour career with mentorship and leadership opportunities.


• Hybridwork flexibility.


• Continuouslearning support through certifications and professional developmentprograms.

From the Tsaaro Team

"At Tsaaro, we believe cybersecurity is built onstrong governance, informed risk decisions, and trusted partnerships. If you'reexcited about helping organizations strengthen their cyber resilience whileworking on meaningful consulting engagements, we'd love to have you on ourteam."

Ready to Advance Your Cyber GRC Career?