Third-Party Risk Management (TPRM) Consultant

Tsaaro Solutions Pvt. Ltd.; Mumbai Suburban; Hybrid; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Hybrid work

Learning & certifications

Mentorship & leadership opportunities

Job summary

Tsaaro Solutions Pvt. Ltd. in Malad West, Mumbai Suburban invites a Cyber GRC & Third-Party Risk Management (TPRM) Consultant to join our privacy and cybersecurity team.

You will assess vendor risks, design governance frameworks, and help clients achieve ISO/NIST based compliance while delivering practical risk-based solutions. The role values collaboration across client engagements, hands-on vendor assessments, and continuous learning with certifications.

Qualifications

• 2–4+ years of experience in Cyber GRC, Third-Party Risk Management (TPRM), Information Security, or Cybersecurity Consulting.
• Hands-on experience conducting vendor security assessments and reviewing security controls.
• Familiarity with ISO 27001, ISO 27701, NIST CSF, CIS Controls, SOC 2 or similar frameworks.
• Excellent analytical, documentation, stakeholder management, and client communication skills.

Responsibilities

• Conduct end-to-end Third-Party Risk Management (TPRM) assessments across vendors, suppliers, and service providers.
• Perform vendor security reviews, due diligence assessments, and security questionnaires.
• Evaluate third-party cybersecurity controls and identify risks, gaps, and mitigation strategies.
• Develop and implement Third-Party Risk Management frameworks, policies, and procedures.
• Support clients in implementing Governance, Risk & Compliance (GRC) programs aligned with business objectives.
• Perform cyber risk assessments, control maturity assessments, and compliance gap analyses.

Skills

Cyber GRC

TPRM

Information Security

Cybersecurity Consulting

Job description

Third-Party Risk Management (TPRM) Consultant

Malad West, India | Posted on 07/24/2026

Join Tsaaro as a Cyber GRC & Third-Party RiskManagement (TPRM) Consultant

Drive Cyber Resilience. Build Trust. Deliver Impact.

Are you passionate about helping organizations strengthentheir cyber governance, manage third-party risks, and achieve compliance withglobal security standards?

At Tsaaro, we go beyond compliance, we help organizationsbuild resilient governance, risk, and compliance (GRC) programs that enablesecure business growth. We are looking for a Cyber GRC & Third-Party RiskManagement (TPRM) Consultant who thrives in consulting environments, enjoyssolving complex security challenges, and can deliver practical, risk-basedsolutions to clients.

At Tsaaro, privacy and cybersecurity are at the heartof everything we do. Our team of privacy consultants and cybersecurity specialistscollaborates to help organizations build robust governance frameworks,strengthen security programs, and manage evolving cyber risks.

Our consulting approach focuses on delivering practical,business-aligned solutions that help clients strengthen security posture,manage vendor risks, achieve compliance, and build long-term resilience.

Your Role: Cyber GRC & Third-Party Risk Management(TPRM) Consultant

As a Consultant, you will work closely with clients toestablish governance frameworks, assess cyber risks, conduct third-party riskassessments, and support compliance initiatives across multiple regulatory andindustry standards.

Key Responsibilities

• Conductend-to-end Third-Party Risk Management (TPRM) assessments across vendors,suppliers, and service providers.
• Performvendor security reviews, due diligence assessments, and securityquestionnaires.
• Evaluatethird-party cybersecurity controls and identify risks, gaps, andmitigation strategies.
• Developand implement Third-Party Risk Management frameworks, policies, andprocedures.
• Supportclients in implementing Governance, Risk & Compliance (GRC) programsaligned with business objectives.
• Performcyber risk assessments, control maturity assessments, and compliance gapanalyses.
• Assistclients in implementing and maintaining ISO 27001, ISO 27701, NIST CSF,CIS Controls, and other security frameworks.
• Supportaudit readiness initiatives including internal audits, control testing,and evidence collection.
• Developrisk registers, risk treatment plans, and executive reports.
• Collaboratewith cross-functional teams to improve governance processes and strengthenorganizational cyber resilience.
• Contributeto cybersecurity consulting engagements involving policy development,control implementation, and regulatory compliance.
• Providerecommendations for continuous improvement in vendor risk governance andcybersecurity practices.
  

Requirements

• 2–4+years of experience in Cyber GRC, Third-Party Risk Management (TPRM),Information Security, or Cybersecurity Consulting.
• Strongunderstanding of Third-Party Risk Management methodologies and vendor riskassessment processes.
• Hands-onexperience conducting vendor security assessments and reviewing securitycontrols.
• Workingknowledge of ISO 27001, ISO 27701, NIST CSF, CIS Controls, SOC 2, orsimilar security frameworks.
• Familiaritywith governance, risk management, compliance processes, and cybersecurityregulations.
• Experiencewith risk assessments, audit support, policy development, and controlimplementation.
• Excellentanalytical, documentation, stakeholder management, and clientcommunication skills.
• Professionalcertifications such as ISO 27001 Lead Implementer/Lead Auditor, CRISC,CISA, CISM, Security+, or similar are preferred.
• Acollaborative, solution-oriented mindset with the ability to managemultiple client engagements.
  
• Workwith one of India's fastest-growing privacy and cybersecurity consultingfirms.
• Gainexposure to global clients across diverse industries.
• Workon strategic Cyber GRC and Third-Party Risk Management engagements.
• Accelerateyour career with mentorship and leadership opportunities.
• Hybridwork flexibility.
• Continuouslearning support through certifications and professional developmentprograms.

From the Tsaaro Team

"At Tsaaro, we believe cybersecurity is built onstrong governance, informed risk decisions, and trusted partnerships. If you'reexcited about helping organizations strengthen their cyber resilience whileworking on meaningful consulting engagements, we'd love to have you on ourteam."\

Ready to Advance Your Cyber GRC Career?