TPRM- DM

Deloitte Shared Services India; Pune District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Deloitte Shared Services India is seeking a cybersecurity risk professional to lead Third‑Party Risk Management engagements, managing vendor risk assessments and regulatory compliance initiatives. You will work with cross‑functional teams to deliver high‑quality risk and compliance solutions.

Responsibilities include overseeing ITGC and PCI DSS testing, reviewing findings, and contributing to executive-level reports and security architecture discussions.

Qualifications

• Experience leading Third‑Party Risk Management engagements.
• Ability to assess security, privacy and regulatory risks for vendors.
• Familiarity with TPRM platforms and risk reporting.

Responsibilities

• Lead TPRM engagements and vendor risk assessments across security, privacy and regulatory risks.
• Oversee TPRM platforms and tools like ServiceNow, Archer, ProcessUnity.
• Review assessment findings, identify gaps, and prepare executive reports.
• Ensure alignment with DORA, FedRAMP, GDPR, ISO 27001 and NIST.

Skills

TPRM engagements

Cybersecurity risk management

TPRM tools

ITGC & PCI DSS testing

InfoSec risk & privacy

ISO 27001/NIST/GDPR

DORA/FedRAMP compliance

Client management & leadership

Risk reporting & exec presentations

Education

B.E./B.Tech. or M.S./M.Tech in CS/InfoSec/Eng

Tools

ServiceNow

Archer

ProcessUnity

Job description

Role Overview

Join Deloittes Cyber team to help organizations manage third‑party cyber risks, strengthen security controls, and meet regulatory and compliance requirements. The role involves leading TPRM engagements, overseeing risk assessments and control testing, managing client relationships, and delivering high‑quality risk and compliance solutions.

Key Responsibilities

• Lead Third‑Party Risk Management (TPRM) engagements and oversee vendor risk assessments, including security, privacy, and regulatory risks.
• Manage TPRM platforms and tools such as ServiceNow, Archer, and ProcessUnity.
• Review third‑party risk assessment findings, identify control gaps, recommend remediation, and prepare executive‑level reports.
• Ensure alignment with regulatory and security frameworks, including DORA, FedRAMP, GDPR, ISO 27001, and NIST.
• Oversee IT General Controls (ITGC), PCI DSS, and third‑party control testing activities.
• Support privacy risk assessments and evaluate data protection requirements across third‑party engagements.
• Contribute to security architecture reviews for AI‑enabled platforms and data environments.
• Manage client relationships, project deliverables, stakeholder expectations, and engagement quality.
• Lead and mentor team members while ensuring timely and high‑quality project delivery.
• Support executive presentations, report writing, and identification of opportunities to enhance client engagements.

Mandatory Skills

• Third‑Party Risk Management (TPRM) and Vendor Risk Assessments
• Cybersecurity Risk Management and Compliance
• TPRM tools: ServiceNow, Archer, or ProcessUnity
• ITGC and PCI DSS Control Testing
• Information Security Risk and Privacy Assessments
• ISO 27001, NIST, and GDPR
• Regulatory Compliance: DORA and FedRAMP
• Client Management, Stakeholder Engagement, and Team Leadership
• Risk Reporting, Analytical Skills, and Executive Presentations

Education

B.E./B.Tech. or a Master’s degree in Computer Science, Information Security, Engineering, or a related discipline.