Join our Cyber Strategy & Transformation team as a Deputy Manager in Third Party Risk Management. This role is based in Delhi and focuses on enhancing cyber resilience through robust third-party risk assessments and strategic advisory.

We are looking for a leader to spearhead engagement teams in delivering comprehensive TPRM assessments and technology risk reviews. You will play a crucial part in shaping and implementing advanced risk management frameworks that align with global standards and regulatory requirements.

This position offers a dynamic environment where you can drive innovation, mentor a talented team, and contribute to critical client success in cybersecurity. You will be instrumental in developing and refining our TPRM methodologies and capabilities.

Lead client engagements for Third Party Risk Management (TPRM), technology risk reviews, and security audits. Develop and refine TPRM policies, procedures, and governance frameworks, encompassing the full vendor lifecycle from onboarding to offboarding. Implement risk tiering, assessment methodologies, and reporting structures aligned with regulatory expectations and industry best practices. Conduct in-depth technical control assessments across various environments including cloud, applications, and network components. Evaluate third-party security postures against leading frameworks like ISO 27001 and NIST, and support secure design reviews. Interpret and apply regulatory requirements for outsourcing, information security, and operational resilience. Ensure high-quality deliverables and support business development by identifying new advisory opportunities. Drive team capability building and promote AI-enabled GRC automation and continuous monitoring.

Proven experience in leading TPRM assessments, technology risk reviews, and security audits. Expertise in developing and implementing TPRM policies, SOPs, and governance frameworks. Strong understanding of vendor lifecycle management processes, including due diligence and risk assessment. Familiarity with risk tiering, assessment criteria, and escalation mechanisms. Experience in conducting technical control assessments for infrastructure, cloud, applications, and networks. Knowledge of cybersecurity frameworks such as ISO 27001, NIST, and PCI DSS. Ability to interpret and apply regulatory requirements related to information security and operational resilience. Experience in quality review of engagement deliverables and proposal preparation. Guidance and mentoring capabilities for team members are essential.