TPRM Assistant Manager - Cyber

Cubical Operations LLP; Mumbai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A prominent firm in IT Services is seeking a skilled Deputy Manager for Third-Party Risk Management. The successful candidate will manage vendor assessments, ensure compliance with regulatory standards, and collaborate with internal teams to improve risk programs. Ideal candidates will have a degree in Information Technology or Risk Management, at least 3 years of relevant experience, and familiarity with risk frameworks. This full-time position is crucial for enhancing the company's risk management strategies.

Qualifications

• Minimum 3 years of experience in Third-Party Risk Management or related domains.
• Strong understanding of standards like ISO 27001, NIST, and SOC 2.
• Experience with TPRM tools and ability to analyze vendor risks.

Responsibilities

• Lead and execute third-party risk assessments across multiple domains.
• Review vendor due diligence questionnaires for risk identification.
• Collaborate with internal stakeholders to enhance TPRM processes.

Skills

Risk frameworks understanding

Analytical skills

Communication skills

Stakeholder management

Vendor risk assessments

Education

Bachelor’s degree in Information Technology or Risk Management

Tools

Archer

Process Unity

OneTrust

Coupa Risk Assess

Job description

Key Account Manager at Cubical Operations LLP

Job Title: Third‑Party Risk Management (TPRM) – Deputy Manager

Experience Required: Minimum 3 to 8 years in TPRM / Vendor Risk / Information Security / Risk Advisory

Employment Type: Full‑time

About the Role:

We are looking for a skilled and motivated Deputy Manager – Third‑Party Risk Management (TPRM) to join our Risk Advisory / Cyber Risk / Governance team in Bangalore. The ideal candidate will have hands‑on experience managing third‑party risk programs, performing vendor assessments, and ensuring compliance with regulatory and internal risk frameworks.

Key Responsibilities

• Lead and execute third‑party risk assessments (security, privacy, operational, financial, compliance, etc.).
• Review vendor due diligence questionnaires and supporting evidence for risk identification.
• Support the design, implementation, and enhancement of TPRM programs, policies, and processes.
• Track and monitor remediation plans and ensure closure of identified vendor risks.
• Collaborate with internal stakeholders such as procurement, legal, compliance, and IT security teams.
• Contribute to automation and process improvement initiatives within the TPRM function.
• Prepare risk reports, dashboards, and metrics for management review.
• Mentor junior team members and support client engagements as a subject matter contributor.

Required Skills & Qualifications

• Bachelor’s degree in information technology, Risk Management, or related field (Master’s preferred).
• Minimum 3 years of experience in Third‑Party Risk Management, Vendor Risk, or related domains.
• Strong understanding of risk frameworks and standards such as ISO 27001, NIST, SOC 2, and SIG questionnaires.
• Experience with TPRM tools such as Archer, Process Unity, OneTrust, Coupa Risk Assess, or similar platforms.
• Good understanding of information security, privacy, and compliance requirements.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and manage multiple priorities in a dynamic environment.

Preferred Certifications (Nice to Have)

• CTPRP / CTPRA
• ISO 27001 LA / LI
• CISA / CRISC / CISSP
• Any certification in risk management or cybersecurity

Seniority level

Not Applicable

Employment type

Full‑time

Job function

Information Technology and Consulting

Industries

IT Services and IT Consulting, Business Consulting and Services, and Computer and Network Security