Job Title:  Lead Senior Associate | Others | Bengaluru | Engineering as a Service/ Operate

Digital Risk Consultant (TPRM)

Third-party cyber risk management and vendor security assessments

• Security rating and continuous monitoring platforms (Radar, BitSight, Security Scorecard, RiskRecon)

• External attack surface and threat monitoring

• Third-party cybersecurity incident response

• AI-enabled vendor risk evaluation

• Cybersecurity frameworks and standards (NIST CSF, NIST AI RMF, ISO 27001, FFIEC, SOC reporting)

Job Description:

• Conduct cybersecurity and information security risk assessments of third-party vendors and service providers.

• Administer continuous monitoring platforms such as Radar, BitSight, Security Scorecard, and RiskRecon.

• Investigate and triage cyber risk alerts from external attack surface management and security rating platforms.

• Analyse changes in vendor security posture and determine materiality and business impact.

• Participate in and coordinate third-party cybersecurity incident response activities.

• Evaluate security, privacy, governance, compliance, and operational risks of AI-enabled vendors and technologies.

• Escalate significant findings and facilitate remediation with suppliers and internal stakeholders.

• Track vendor remediation commitments through closure and ensure appropriate risk disposition.