TPRM : Information Security

FutureSoft India; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

FutureSoft India is seeking a seasoned professional to lead Third Party Risk Management (TPRM) initiatives. You will develop and implement programs to identify, assess, and mitigate vendor risks while aligning with regulatory requirements.

Collaborate with internal teams to craft policies, procedures and controls for TPRM, conduct due diligence, and deliver training on best practices to employees. Candidates typically have 2–10 years in TPRM, with strong knowledge of ISO 27001/ISO 31000, NIST

Qualifications

• 2–10 years of experience in Third Party Risk Management or related field.
• Strong understanding of ISO 27001/ISO 31000 standards for ISMS.
• Experience with NIST CSF, SOC 2/SSAE18 certifications preferred.

Responsibilities

• Develop and implement Third Party Risk Management (TPRM) programs to identify, assess, and mitigate risks associated with third-party vendors.
• Conduct regular risk assessments and due diligence reviews of third parties to ensure compliance with regulatory requirements.
• Collaborate with internal stakeholders to develop policies, procedures, and controls for managing TPRM activities.
• Provide training and awareness programs for employees on TPRM best practices.

Skills

TPRM experience

ISO 27001 knowledge

NIST CSF familiarity

SOC 2/SSAE18 familiarity

Job description

Roles and Responsibilities

• Develop and implement Third Party Risk Management (TPRM) programs to identify, assess, and mitigate risks associated with third-party vendors.
• Conduct regular risk assessments and due diligence reviews of third parties to ensure compliance with regulatory requirements.
• Collaborate with internal stakeholders to develop policies, procedures, and controls for managing TPRM activities.
• Provide training and awareness programs for employees on TPRM best practices.

Job Requirements

• 2-10 years of experience in Third Party Risk Management or related field.
• Strong understanding of ISO 27001/ISO 31000 standards for Information Security Management System (ISMS).
• Experience with NIST Cybersecurity Framework (CSF), SOC 2/SSAE18 certifications preferred.