Third Party Risk Management - Subcontractor
Bengaluru · Senior
Applicants who checked fit first are 3.1× more likely to hear back
Your score for this role already exists
ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.
Always free · no credit card · 1 tap with Google
What we know about this role
HIGH
Our tracked job listings for Birlasoft show strong recent activity.
First 72 hours
Window passed - posted 4d agoEarly applicants get seen before the pile builds.
Not a repost
The first time we've seen this listing - it hasn't been closed and reopened.
Skills required
7 listedYou almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.
Job description
Area(s) of responsibility
Required Skills & Experience:
- 6+ years of experience in Third‑Party Risk Management, Vendor Risk, Cybersecurity Risk, IT Audit, or GRC roles.
- Strong understanding of the TPRM lifecycle and vendor risk frameworks.
- Hands‑on experience with security assessments and control testing.
- Knowledge of cybersecurity concepts, access controls, incident response, and data protection.
- Excellent analytical, documentation, and stakeholder communication skills.
- Experience working with global vendors and cross‑region stakeholders.
Key Responsibilities:
- Conduct inherent and residual risk assessments for vendors across cybersecurity, data privacy, operational, and compliance domains.
- Perform vendor due diligence during onboarding and periodic reviews.
- Review vendor‑provided evidence (SOC reports, ISO 27001, SIG, penetration test summaries, etc.).
- Assess vendor alignment with security frameworks such as ISO 27001, NIST, SOC 2, and HP internal security policies.
- Identify gaps, document findings, and recommend risk mitigation and remediation plans.
- Support compliance with global regulations (GDPR, data protection, internal audit requirements).
- Support the end‑to‑end third‑party lifecycle: onboarding, ongoing monitoring, issue management, and off‑boarding.
- Track vendor risks, remediation actions, and exceptions in GRC or risk management tools.
- Collaborate with Procurement, Legal, IT, Privacy, and Business stakeholders.
- Participate in internal audits, regulatory reviews, and risk governance forums.
Tools to land this role
PremiumYour match score, skill map and tracker stay free.
Ground Reality
PremiumSpot the dealbreakers in this 209-word post before you apply
Skip jobs with hidden dealbreakers. See what they actually need, what's easy to miss, and how they describe the team.
Ground Reality on every job, plus Insider Path, practice interviews and resume tailoring.
Insider Path
PremiumFind someone who can refer you here
We help you find people there who worked or studied where you did, and draft your first message and follow-up.
Free · no signup
Get tomorrow's jobs before you have to search
Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.
No spam. Just jobs and resources.
Why people use ASAI
Someone shared one job with you. ASAI keeps finding the rest.
Scored, not searched. Every role ranked against your actual profile.
Alerts as often as hourly. Reach new roles while the pile is still small.
Skill gaps, spelled out. See exactly which requirements you don't meet yet.
Verified jobs, only. Say no to ghost jobs. Your time deserves respect.
More Security Engineer roles in Bengaluru
See all
Keep browsing