Remote TPRM: Assessment & Remediation SME

Tata Consultancy Services Limited; Sunnyvale (CA); A distancia; USD 90.000 - 140.000; Jornada completa

Descripción de la vacante

Tata Consultancy Services Limited in Sunnyvale, CA seeks an experienced Third-Party Risk Management (TPRM) Assessment and Remediation SME to manage the end-to-end lifecycle of supplier cybersecurity risk assessments in a fully remote, client-facing environment.

You will own CAPs end-to-end, coordinate with Legal, Procurement and InfoSec on remediation timelines, run a structured weekly leadership report, and escalate high-risk findings to client leadership with clear evidence.

Formación

• 5+ years in cybersecurity, TPRM, GRC operations, or supplier risk coordination.
• Working knowledge of NIST CSF, ISO 27001, SOC 2, SIG/CAIQ.
• Hands-on experience with GRC/TPRM tools (OneTrust, Archer, ServiceNow GRC, SupplierNinja, or similar).
• Proven ownership of high-volume, multi-step communication workflows with strict tracking/documentation.
• Excellent written communication for remote, client-facing engagement.
• Experience operating in distributed/remote teams.

Responsabilidades

• Supplier Inventory Management: maintain the Supplier Inventory in GRC platforms as the single source of truth for assessment status.
• Assessment Execution: evaluate suppliers against standard frameworks and validate evidence.
• Remediation Management: own CAPs end-to-end and drive closure with vendors and owners.
• Stakeholder Communication & Escalation: run structured outreach and escalate unresolved/high-risk findings.
• Weekly Reporting: deliver a standing weekly metrics report to leadership.

Conocimientos

Cybersecurity

GRC

Communication

Remote work

GRC tools

Herramientas

OneTrust

Archer

ServiceNow GRC

SupplierNinja

Descripción del empleo

Tata Consultancy Services Limited in Sunnyvale, CA seeks an experienced Third-Party Risk Management (TPRM) Assessment and Remediation SME to manage the end-to-end lifecycle of supplier cybersecurity risk assessments in a fully remote, client-facing environment.

You will own CAPs end-to-end, coordinate with Legal, Procurement and InfoSec on remediation timelines, run a structured weekly leadership report, and escalate high-risk findings to client leadership with clear evidence.