Join Deloitte's Cyber Risk team as a Third-Party Risk Management (TPRM) Consultant in Pune. This role is pivotal in helping organizations fortify their defenses against cyber threats by managing risks associated with third-party vendors. You will be instrumental in assessing, monitoring, and mitigating these risks, ensuring business resilience and the protection of valuable assets.

This position offers a dynamic environment where you'll collaborate with diverse teams and stakeholders, contributing to strategic cyber risk management initiatives. We are looking for professionals who can embed security into the core of business operations and drive effective risk mitigation strategies.

As a TPRM Consultant, your core responsibilities will encompass comprehensive third-party risk assessments, detailed vendor due diligence, and thorough compliance reviews. You will actively track remediation efforts and conduct ongoing monitoring to ensure compliance and security standards are consistently met.

Key duties include managing the end-to-end TPRM lifecycle, from onboarding to periodic reassessments. You will critically review vendor responses, evidence, and control documentation across various risk domains. Effective coordination with clients and vendors, coupled with clear documentation of findings and recommendations, will be essential for success in this role.

We are seeking a skilled TPRM Consultant with a strong foundation in risk and compliance principles, including information security, data privacy, and business continuity. Proficiency in English is required, with mandatory business-level fluency in Spanish or Portuguese to engage effectively with international clients and stakeholders.

Essential skills include experience with risk assessment methodologies, stakeholder management, and the preparation of client-ready documentation. A Bachelor’s degree in a relevant field is necessary, and prior consulting experience or exposure to global TPRM programs is highly advantageous. Familiarity with common risk frameworks such as ISO 27001 and NIST is preferred.