TPRM Cybersecurity Consultant: Risk & Remediation Lead

NTT Philippines Solutions Inc.; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

NTT DATA in Metro Manila is seeking an experienced cybersecurity professional to identify, assess, and manage risks across the third-party vendor ecosystem. You will work with clients and service providers to conduct security assessments, evaluate risks, and support remediation strategies in a collaborative, client-focused environment.

The role emphasizes TPRM engagements, security controls, and industry frameworks, with opportunities to mentor juniors and contribute to policy development.

Qualifications

• 2 to 5 years of relevant experience in cybersecurity, information security assessments, IT audit, IT risk, third-party risk, or related disciplines.
• Strong knowledge of cybersecurity controls, risk assessment methodologies, and industry-leading security frameworks.
• Experience conducting Third-Party Vendor/Supplier Risk Assessments and managing identified risks.
• Client-facing experience with the ability to communicate effectively with business units, vendors, technical teams, and leadership stakeholders.
• Strong stakeholder and project management skills with the ability to manage multiple activities within established deadlines.
• Experience leading engagements or workstreams and coaching junior team members.
• Excellent written and verbal communication skills.
• Strong analytical skills with the ability to translate security findings into clear and practical recommendations.
• Proficiency in Microsoft Excel, PowerPoint, and Word.
• Collaborative mindset with the ability to work effectively both independently and as part of a team.

Responsibilities

• Deliver Third-Party Risk Management (TPRM) engagements, including security assessments of new and existing vendors and service providers.
• Review vendor responses, supporting evidence, security documentation, and other materials to identify potential cybersecurity risks.
• Conduct risk assessments against client IT security, cybersecurity, and data privacy requirements.
• Assess vendor risks and define appropriate risk ratings, corrective actions, and remediation recommendations.
• Identify security control gaps and potential risks to client environments.
• Work directly with clients, business units, and third-party vendors to clarify findings and agree on appropriate remediation actions.
• Monitor identified risks and remediation activities through closure.
• Review, develop, and enhance security policies based on client requirements and recognized industry standards.
• Manage day-to-day engagement activities, deliverables, timelines, and stakeholder reporting.
• Review the work of junior team members and provide coaching, guidance, and constructive feedback.
• Build strong working relationships with clients and internal stakeholders.
• Contribute to team development, knowledge sharing, recruitment, and other people initiatives.

Skills

Cybersecurity

Information Security

IT Audit

IT Risk

Third-Party Risk

Client-facing

Project Management

Communication

Analytical

Office Suite

Education

Bachelor's degree in Computer Science / Information Technology / Engineering / Cybersecurity / related

Tools

Microsoft Excel

PowerPoint

Word

Job description

NTT DATA in Metro Manila is seeking an experienced cybersecurity professional to identify, assess, and manage risks across the third-party vendor ecosystem. You will work with clients and service providers to conduct security assessments, evaluate risks, and support remediation strategies in a collaborative, client-focused environment.

The role emphasizes TPRM engagements, security controls, and industry frameworks, with opportunities to mentor juniors and contribute to policy development.