TPRM R&C Assistant Operation Manager

Mphasis; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Mphasis in Bengaluru leads strategic cyber risk governance and third-party risk assessments across enterprise products, services, and vendors. You will drive the risk assessment lifecycle and ensure alignment with regulatory expectations and client governance models.

In this role, you will oversee audit findings, remediation, and program quality while steering revenue growth through expanded client relationships and new service offerings.

Qualifications

• Extensive experience leading enterprise-level cyber risk assessments across products, services, and vendors.
• Ability to drive remediation governance and threat modeling with clear prioritization.
• Strong understanding of regulatory expectations and client governance models.

Responsibilities

• Lead enterprise-level cyber risk assessments and third-party risk governance for critical engagements.
• Act as the primary escalation point for audit findings and regulatory observations; ensure timely remediation.
• Own revenue growth strategy by expanding client relationships and enabling new opportunities.
• Define quality standards for risk management deliverables and oversee continuous improvement initiatives.
• Govern security control followups and executive dashboards; report risk posture to senior stakeholders.
• Lead client engagements and align Mphasis capabilities with business priorities to reduce risk and generate revenue.

Skills

Cyber risk governance

Risk assessment lifecycle

Audit & regulatory compliance

Client management

Job description

Strategic Cyber & Third-Party Risk Governance

Lead and oversee enterpriselevel and thirdparty cyber risk assessments, including critical and highrisk engagements.
Own the risk assessment lifecycle for products, services, infrastructure, and vendors within scope.
Drive standardized risk identification, threat modeling, vulnerability prioritization, and remediation governance.
Ensure risk assessments align with regulatory expectations, industry benchmarks, and client governance models.

Audit, Regulatory & Compliance Leadership

Act as the primary escalation point for audit findings, regulatory observations, and material risk issues.
Oversee audit closure governance, ensuring timely, welldocumented, and sustainable remediation.
Lead calibration forums to maintain consistency, defensibility, and quality of risk decisions across teams.

Revenue Growth & Cost Optimization

Own and drive revenue growth strategy for the account by expanding existing client relationships and enabling new business opportunities.
Act as a trusted advisor to clients by aligning cyber security and thirdparty risk services with business priorities, regulatory expectations, and risk appetite.
Identify, shape, and propose new service offerings, scope expansions, and solution enhancements leveraging Mphasis capabilities.
Lead discussions on commercial models, effort optimization, and valuebased pricing in collaboration with sales and account leadership.
Drive cost optimization initiatives through automation, process transformation, tooling improvements, and scalable delivery models.
Ensure delivery efficiency by enforcing standardization, quality governance, optimal staffing mix, and reduced operational overhead.
Balance growth and margin by improving utilization, productivity metrics, and delivery predictability.
Track and communicate revenue, margin, and cost performance to senior stakeholders and recommend corrective actions where required.

Quality, Process & Team Leadership

Define and enforce quality standards for TPRM, vulnerability management, and cyber risk deliverables.
Oversee peer review frameworks, quality audits, and continuous improvement initiatives.
Provide strategic floor support oversight, ensuring analysts and senior analysts receive appropriate coaching and guidance.
Drive learning programs, refreshers, and capability uplift aligned to evolving threat and regulatory landscapes.

Security Control Monitoring & Executive Reporting

Govern security control followups, risk treatment tracking, and management reporting.
Own executivelevel dashboards, KRIs, KPIs, and risk summaries for senior stakeholders and clients.
Communicate regularly on IT risk posture, emerging threats, trend analysis, and mitigation effectiveness.

Client Management & Business Enablement

Lead client engagements, governance meetings, and strategic discussions on cyber and thirdparty risk.
Understand client business priorities and propose Mphasis capabilities to support risk reduction and generate additional revenue opportunities.
Act as a trusted advisor by aligning security risk management with business outcomes.

Business Enhancements & Continuous Improvement

Drive process optimization, automation, and tool enhancements across TPRM and cyber risk operations.
Identify improvement opportunities that strengthen delivery efficiency, client satisfaction, and scalability.
Contribute to account growth strategy, innovation initiatives, and operational excellence programs.