About the role
# Job Description: Digital Risk Consultant – Third-Party Risk Management (TPRM)
**Location:** Bengaluru / Hyderabad
**Experience:** 5 - 9 years
**Position:** Intermediate / Senior Level
**Employment Type:** Full-Time
### Job Summary
We are looking for an experienced Digital Risk Consultant specializing in Third-Party Risk Management (TPRM) and Cybersecurity Risk Assessment. The ideal candidate will have hands-on experience in evaluating vendor security risks, conducting third-party cybersecurity assessments, and performing continuous security monitoring.
The candidate should be familiar with security rating platforms, external attack surface monitoring, cybersecurity frameworks, and vendor risk remediation processes.
### Key Responsibilities
- Conduct cybersecurity and information security risk assessments of third-party vendors, suppliers, and service providers.
- Perform vendor security assessments and evaluate their overall cybersecurity posture.
- Administer and monitor security rating platforms such as BitSight, SecurityScorecard, RiskRecon, and Radar.
- Investigate, analyse, and triage cyber risk alerts generated through external attack surface management and security monitoring platforms.
- Identify changes in vendor security posture and assess their potential business impact and risk exposure.
- Participate in and coordinate third-party cybersecurity incident response activities.
- Evaluate security, privacy, governance, compliance, and operational risks associated with AI-enabled vendors and technologies.
- Identify significant security gaps, escalate critical findings, and coordinate remediation activities with vendors and internal stakeholders.
- Track vendor remediation plans and commitments through closure.
- Ensure appropriate risk documentation, reporting, and risk disposition.
### Must-Have Skills
- Strong experience in Third-Party Risk Management (TPRM).
- Hands-on experience in vendor cybersecurity and information security risk assessments.
- Knowledge of security rating and continuous monitoring platforms:
- BitSight
- SecurityScorecard
- RiskRecon
- Radar
- Experience in External Attack Surface Management (EASM) and threat monitoring.
- Understanding of third-party cybersecurity incident response.
- Knowledge of cybersecurity frameworks and standards:
- NIST Cybersecurity Framework (NIST CSF)
- NIST AI Risk Management Framework (NIST AI RMF)
- ISO 27001
- FFIEC
- SOC Reporting
### Good-to-Have Skills
- Experience in AI-enabled vendor risk evaluation.
- Exposure to cybersecurity threat intelligence and external risk monitoring.
- Knowledge of vendor remediation and risk governance processes.
- Experience working with enterprise risk management and compliance teams.
### Educational Qualifications
- Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or a related discipline.
- Equivalent relevant professional experience will also be considered.
This page is fully interactive when JavaScript is enabled. Please enable JavaScript to apply or browse related roles.
