TPRM Manager / Senior Manager - Cyber

Cubical Operations LLP; Bengaluru; On-site; INR 2,800,000 - 5,200,000; Full time

Job summary

A risk management consultancy in Bengaluru seeks an Executive Search Consultant with expertise in Third-Party Risk Management and Governance. The ideal candidate will lead TPRM engagements and collaborate closely with stakeholders to enhance risk frameworks. Requires 6+ years of experience, strong analytical skills, and proficiency in relevant GRC tools. This is a full-time, senior-level role offering competitive compensation based on experience.

Qualifications

• 6+ years of experience needed for Manager; 9+ years for Senior Manager.
• Strong expertise in TPRM, GRC, IT Risk Management.
• Proficiency with GRC tools and regulatory compliance standards.
• Working knowledge of ISO 27001, SOC 2, NIST, GDPR, RBI Guidelines.
• Proficiency in GRC tools like Archer, ServiceNow, MetricStream, or similar platforms.

Responsibilities

• Lead and manage TPRM engagements and vendor risk assessments.
• Conduct risk-based audits of third-party vendors.
• Collaborate with procurement and legal teams on risk evaluations.
• Collaborate with internal stakeholders, including procurement, legal, risk, and compliance teams, to ensure consistent risk evaluation practices.
• Implement and manage GRC tools and platforms to streamline TPRM workflows and automate reporting.
• Prepare detailed reports, dashboards, and executive summaries for senior leadership and audit committees.
• Track regulatory updates and industry best practices to enhance TPRM policies and frameworks.
• Act as a point of escalation for complex third-party risks and provide strategic guidance for remediation plans.
• Lead a team of risk consultants and provide technical mentorship, training, and quality reviews.
• Manage large-scale TPRM transformation programs, including implementation of GRC solutions.
• Act as a trusted advisor for senior stakeholders and CXOs, ensuring alignment between business objectives and risk mitigation strategies.
• Drive continuous improvement by introducing innovative risk assessment methodologies and automation initiatives.

Skills

TPRM

GRC

IT Risk Management

Stakeholder Management

Analytical Skills

Audit Reviews

Regulatory Compliance

Stakeholder Management

Strong Communication

Tools

Archer

ServiceNow

MetricStream

Job description

Executive Search Consultant | Corporate Matchmaker

Job Description: TPRM Manager / Senior Manager

Experience: 6+ Years

Position Level: Manager / Senior Manager

Employment Type: Full-Time

Preferred Joining: Immediate / Early Joiners

About the Role

We are seeking a highly skilled professional with expertise in Third-Party Risk Management (TPRM), Governance, Risk & Compliance (GRC), and IT Risk & Audit to join our team as a Manager or Senior Manager. The ideal candidate will be responsible for leading and delivering TPRM engagements, assessing vendor risks, driving compliance, and working closely with stakeholders to strengthen the organization’s third-party risk framework.

Key Responsibilities

• Lead and manage Third-Party Risk Management (TPRM) engagements, including onboarding, due diligence, monitoring, and periodic risk assessments of vendors.
• Conduct risk-based audits of third-party vendors to evaluate security controls, regulatory compliance, and data protection measures.
• Develop and maintain frameworks for vendor risk assessment, scoring, and reporting aligned with organizational GRC requirements.
• Collaborate with internal stakeholders, including procurement, legal, risk, and compliance teams, to ensure consistent risk evaluation practices.
• Implement and manage GRC tools and platforms to streamline TPRM workflows and automate reporting.
• Prepare detailed reports, dashboards, and executive summaries for senior leadership and audit committees.
• Track regulatory updates and industry best practices to enhance TPRM policies and frameworks.
• Act as a point of escalation for complex third-party risks and provide strategic guidance for remediation plans.

Additional Responsibilities for Senior Manager:

• Lead a team of risk consultants and provide technical mentorship, training, and quality reviews.
• Manage large-scale TPRM transformation programs, including implementation of GRC solutions.
• Act as a trusted advisor for senior stakeholders and CXOs, ensuring alignment between business objectives and risk mitigation strategies.
• Drive continuous improvement by introducing innovative risk assessment methodologies and automation initiatives.

Required Skills & Qualifications

• Experience: 6+ years for Manager; 9+ years for Senior Manager.
• Strong expertise in TPRM, GRC, IT Risk Management, and Vendor Governance frameworks.
• Hands-on experience in risk assessments, audit reviews, and regulatory compliance.
• Working knowledge of industry standards and frameworks such as ISO 27001, SOC 2, NIST, GDPR, RBI Guidelines, etc.
• Proficiency in GRC tools like Archer, ServiceNow, MetricStream, or similar platforms.
• Strong analytical, problem-solving, and stakeholder management skills.
• Excellent verbal and written communication skills.

Certifications (Preferred but Not Mandatory)

• CISA, CISM, CISSP, CRISC, or ISO 27001 LA certifications will be an added advantage.
• Job Type: Full-time, Permanent
• Position Level: Manager / Senior Manager
• Preferred Joining: Immediate or within 30 days
• Compensation: Competitive, based on experience and certifications