Employer description & source details
Role OverviewWe are seeking a proactive and detailed-oriented IT Risk & Third-Party Risk Management (TPRM) Specialist to join our team. In this role, you will be responsible for executing cybersecurity risk assessments for our third-party vendors, suppliers, service providers and internal IT risk management processes. You will collaborate closely with IT, Engineering, Procurement, Legal, and Risk teams to identify, evaluate, and mitigate technology and vendor risks across the organization. Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance. Framework Familiarity: Working knowledge of industry frameworks and standards, such as RBI Framework for Outsourcing of Payment and Settlement-related Activities by PSOs, RBI MD on Cyber Resilience & Digital Payment Security Controls, ISO 27001, ISO 31000, and NIST CSF. Risk Assessment & Identification: Execute internal IT risk assessments across IT infrastructure, cloud environments, business applications, and operational workflows. Risk Register Maintenance: Maintain and regularly update the enterprise IT Risk Register, tracking risk treatment plans, remediation timelines, and risk acceptance approvals. Vendor Risk Assessments: Perform end-to-end cybersecurity risk assessments for third-party vendors, suppliers, and external service providers. Cross-Functional Collaboration: Work closely with Procurement, Legal, and stakeholder teams during vendor onboarding, ongoing monitoring, and contract reviews.
Extracted skills: cybersecurity, security