Location : Bengaluru / Hyderabad

Experience : 5+ Years

Position : Intermediate / Senior Level

Employment Type : Full-Time

Job Summary :

We are looking for an experienced Digital Risk Consultant specializing in Third-Party Risk Management (TPRM) and Cybersecurity Risk Assessment. The ideal candidate will have hands-on experience in evaluating vendor security risks, conducting third-party cybersecurity assessments, and performing continuous security monitoring.

The candidate should be familiar with security rating platforms, external attack surface monitoring, cybersecurity frameworks, and vendor risk remediation processes.

Key Responsibilities :

- Conduct cybersecurity and information security risk assessments of third-party vendors, suppliers, and service providers.

- Perform vendor security assessments and evaluate their overall cybersecurity posture.

- Administer and monitor security rating platforms such as BitSight, SecurityScorecard, RiskRecon, and Radar.

- Investigate, analyse, and triage cyber risk alerts generated through external attack surface management and security monitoring platforms.

- Identify changes in vendor security posture and assess their potential business impact and risk exposure.

- Participate in and coordinate third-party cybersecurity incident response activities.

- Evaluate security, privacy, governance, compliance, and operational risks associated with AI-enabled vendors and technologies.

- Identify significant security gaps, escalate critical findings, and coordinate remediation activities with vendors and internal stakeholders.

- Track vendor remediation plans and commitments through closure.

- Ensure appropriate risk documentation, reporting, and risk disposition.

Must-Have Skills :

- Strong experience in Third-Party Risk Management (TPRM).

- Hands-on experience in vendor cybersecurity and information security risk assessments.

- Knowledge of security rating and continuous monitoring platforms : BitSight, SecurityScorecard, RiskRecon, Radar.

- Experience in External Attack Surface Management (EASM) and threat monitoring.

- Understanding of third-party cybersecurity incident response.

- Knowledge of cybersecurity frameworks and standards : NIST Cybersecurity Framework (NIST CSF), NIST AI Risk Management Framework (NIST AI RMF), ISO 27001, FFIEC, SOC Reporting.

Good-to-Have Skills :

- Experience in AI-enabled vendor risk evaluation.

- Exposure to cybersecurity threat intelligence and external risk monitoring.

- Knowledge of vendor remediation and risk governance processes.

- Experience working with enterprise risk management and compliance teams.

Educational Qualifications :

- Bachelor's or Master's degree in Computer Science, Engineering, Information Security, or a related discipline.

- Equivalent relevant professional experience will also be considered.