Join a leading cybersecurity team focused on safeguarding organizations from cyber threats and protecting critical assets. We emphasize a secure, vigilant, and resilient approach, integrating cyber risk management into strategic development to unlock new opportunities and effectively manage information technology risks. Discover more about our Cybersecurity services.

This role is for a motivated and detail-oriented Consultant with 2-4 years of experience in Third-Party Risk Management (TPRM). You will be instrumental in delivering privacy and vendor risk consulting engagements, guiding clients in implementing robust privacy and risk management frameworks, and ensuring adherence to relevant regulatory and industry standards.

The ideal candidate possesses a solid understanding of data privacy principles, TPRM processes, and Governance, Risk, and Compliance (GRC) concepts, complemented by strong analytical and communication abilities.

Support DPDPA, GDPR, and other data privacy compliance and implementation initiatives. Conduct assessments for applicability, gaps, and privacy maturity. Assist in performing Data Protection Impact Assessments (DPIAs), Business Impact Assessments (BIAs), data flow mapping, and maintaining Records of Processing Activities (RoPA).

Review business processes to pinpoint personal data processing activities and associated privacy risks. Aid in creating privacy policies, standards, procedures, notices, and governance documentation. Support the implementation of consent management, data retention, data classification, and data subject rights processes. Track remediation efforts and contribute to privacy compliance reporting.

Enhance and support Third-Party Risk Management (TPRM) frameworks. Perform vendor due diligence and assess third-party security and privacy risks. Review vendor questionnaires and supporting documentation. Evaluate vendor risks and propose mitigation strategies. Support contract reviews from an information security and privacy standpoint. Track third-party risk remediation and maintain assessment records.

Assist in compliance assessments against DPDPA, ISO/IEC 27001, ISO/IEC 27701, and other applicable regulatory mandates. Support the creation and review of governance documents, policies, and standards. Conduct control assessments to identify compliance gaps. Prepare assessment reports, presentations, and client deliverables. Engage in client workshops, interviews, and stakeholder discussions.

Gather and analyze business and technical information. Prepare project documentation, meeting minutes, trackers, and status reports. Support project planning and ensure timely delivery of assigned workstreams. Collaborate effectively with cross-functional teams for high-quality project execution.

A Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is required.