TPRM Consultant

Clarity Consulting; Bengaluru; On-site; INR 600,000 - 900,000; Full time

Job summary

Clarity Consulting is seeking an Analyst/Associate Consultant to support enterprise-wide Third-Party Risk Management engagements in Bengaluru. The role emphasizes foundational cyber risk knowledge, documentation quality, and clear communication, with learning agility as a core trait.

You will assist in end-to-end TPRM activities, including vendor onboarding, periodic reviews, continuous monitoring, and risk-related documentation.

Qualifications

• 02 years of experience or exposure to cybersecurity, information security, IT risk/ IT audit/ GRC.
• Foundational understanding of risk management concepts.
• Awareness of third-party risk management concepts and vendor due diligence.
• Strong written and verbal communication skills.

Responsibilities

• Support end-to-end TPRM lifecycle activities, including vendor onboarding risk assessments and periodic reviews.
• Assist in risk identification and basic risk scoring across information security and related risks.
• Review third-party artifacts like security policies, ISO reports, and vendor questionnaires.
• Support risk issue tracking, remediation follow-ups, and closure documentation.
• Coordinate with internal stakeholders and vendors to follow up on information requests.

Skills

Written communication

Verbal communication

Willingness to learn

Job description

Role & responsibilities

The Analyst/ Associate Consultant supports delivery of enterprise-wide Third-Party Risk Management (TPRM) engagements, focusing on execution support across the

end-to-end vendor lifecycle. The role emphasizes foundational cyber/ information security risk knowledge, documentation quality, communication clarity, and learning

agility. Prior deep TPRM experience is not mandatory.

Key Responsibilities

• Support execution of end-to-end TPRM lifecycle activities, including vendor

onboarding risk assessments, periodic vendor reviews, continuous monitoring

activities

• Assist in risk identification, risk assessment, and basic risk scoring across

information security risk, operational risk, business continuity risk

• Review and analyze third-party artifacts, such as security policies and

procedures, ISO certifications and SOC reports, vendor documentation and

questionnaires

• Support risk issue tracking, remediation follow-ups, and closure documentation
• Assist in development and maintenance of TPRM policies and procedures, risk

assessment documentation, risk registers and reports

• Coordinate with internal stakeholders and vendors to follow up on information

requests, support assessment timelines, clarify risk-related queries

Knowledge & Experience Requirements -

Mandatory

• 02 years of experience or exposure to:
• Cybersecurity, information security, IT risk/ IT audit/ GRC
• Foundational understanding of:
• Risk management concepts
• Difference between policy, standard, and procedure
• Basic cyber/ information security concepts

• Awareness of third-party risk management concepts, vendor risk and due diligence principles (basics/ preliminary)

• Strong written and verbal communication skills
• Willingness to learn and adapt in a consulting environment
• Exposure to or knowledge of vendor onboarding or due diligence activities
• Exposure to or knowledge of business continuity concepts, continuous monitoring, risk reporting or documentation