TPRM- Manager / Senior Manager

Job Title: Manager / Senior Manager – TPRM (Third-Party Risk Management)

Experience: 5+ Years

Location: Bangalore

Employment Type: Full-Time

Notice Period: Immediate / Short Notice Preferred

Job Summary

We are seeking an experienced and dynamic professional for the role of Manager / Senior Manager – Third-Party Risk Management (TPRM). The candidate will be responsible for overseeing and managing risks associated with third-party vendors, ensuring compliance with regulatory requirements, and strengthening the organization’s risk management framework.

Key Responsibilities

• Lead and manage the Third-Party Risk Management (TPRM) program
• Conduct risk assessments and due diligence of vendors and third parties
• Evaluate vendor controls related to information security, compliance, and operational risks
• Ensure adherence to regulatory, legal, and internal compliance standards
• Collaborate with cross-functional teams including Legal, Compliance, Procurement, and IT Security
• Develop and maintain vendor risk frameworks, policies, and procedures
• Monitor ongoing vendor performance and risk exposure
• Drive remediation plans for identified risks and gaps
• Support audits and regulatory reviews related to third-party risk
• Prepare reports and dashboards for senior stakeholders and leadership

Required Skills & Experience

• 5+ years of experience in TPRM, Vendor Risk Management, Risk & Compliance, or related domains
• Strong understanding of third-party/vendor risk frameworks and lifecycle
• Experience in risk assessment methodologies and control evaluations
• Knowledge of regulatory standards (e.g., ISO 27001, SOC 2, GDPR, etc.)
• Experience working with cross-functional stakeholders
• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management abilities

Preferred Qualifications

• Experience in BFSI, IT Services, or Consulting environments
• Familiarity with GRC tools (e.g., Archer, ServiceNow GRC, etc.)
• Certifications such as:
• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISM or similar

Key Competencies

• Risk assessment and mitigation
• Stakeholder management
• Decision-making and leadership
• Attention to detail
• Ability to work in a fast-paced environment

Additional Information

• Experience in managing large vendor ecosystems is a plus
• Candidates with team handling or leadership experience will be preferred
• Immediate joiners or candidates with short notice period will be prioritized.