TPRM Manager – Cybersecurity & Technology Risk

Job Description Job Title:

TPRM Manager – Cybersecurity & Technology Risk Location:

Ahmedabad, India Experience:

7+ Years Department:

Technology Risk, Cybersecurity & TPRM Consulting Reporting To:

Regional Partner / Director – Technology Risk & Cybersecurity Notice Period:

Early joiners preferred Role Overview We are seeking a highly capable and self-driven

TPRM Manager

to establish and scale the

Third Party Risk Management

practice in

Ahmedabad . This is a leadership role in a growing geography, requiring independent ownership of client engagements, end-to-end vendor risk assessments, stakeholder management, and contribution to regional practice and revenue growth. The ideal candidate will have strong expertise in

TPRM, IT Risk Management, and Information Security , with hands-on experience in vendor assessments, control evaluations, and regulatory compliance across BFSI and regulated industries. Key Responsibilities 1. Client & Engagement Management Independently lead

TPRM engagements

for clients across BFSI, Telecom, Manufacturing, Healthcare, and GCCs. Act as the

single point of contact

for TPRM engagements in the Ahmedabad region. Build trusted relationships with

CXOs, CISOs, Procurement Heads, Compliance, and Internal Audit leaders . Plan, scope, and execute

third-party risk assessments

aligned with industry standards and regulatory expectations. Review assessment reports, risk ratings, and remediation plans to ensure

quality, consistency, and timely delivery . 2. TPRM & Risk Assessment Delivery Conduct

end-to-end vendor risk assessments , including inherent risk scoring and residual risk evaluation. Assess third-party controls across: Information Security & Cybersecurity IT General Controls (ITGC) Data Privacy & Regulatory Compliance Business Continuity & Disaster Recovery (BCP/DR) Cloud and Outsourced Service Providers Perform

SOC 1 / SOC 2 report reviews , control gap analysis, and risk acceptance recommendations. Evaluate compliance with frameworks and regulations such as

ISO 27001, NIST CSF, CIS Controls, RBI, SEBI, GDPR, and local data protection requirements . Coordinate with specialist teams for

VAPT, cloud security, and privacy assessments

where required. 3. Stakeholder & Team Leadership Collaborate with internal stakeholders including

partners, service line leaders, legal, compliance, and delivery teams

across regions. Provide

technical guidance, mentoring, and quality reviews

for junior consultants and analysts. Represent the Ahmedabad location in

regional TPRM capability-building initiatives and leadership forums . 4. Business Development & Market Growth Identify and develop opportunities in

TPRM, vendor risk, and digital trust services . Support

proposal development, RFP responses, and client presentations . Participate in

industry forums, client workshops, and thought leadership initiatives

focused on third-party risk. Contribute to regional revenue targets and help build a

local TPRM client portfolio . Qualifications & Experience Education:

B.E./B.Tech in Computer Science, IT, or related discipline (MBA preferred). Experience: 7+ years of experience in

TPRM, IT Risk, Cybersecurity, or Technology Risk Consulting . Hands-on experience in

vendor risk assessments, SOC report reviews, and regulatory compliance . Proven ability to manage

end-to-end client engagements independently . Exposure to business development and client acquisition is a strong advantage. Certifications (Preferred) CISA CISM ISO 27001 Lead Auditor CRISC Third Party Risk / Vendor Risk certifications Data Privacy certifications (preferred) Core Skills & Competencies Strong understanding of

TPRM lifecycle , inherent risk scoring, due diligence, and continuous monitoring. Working knowledge of

ISO 27001, NIST CSF, CIS Controls, COBIT, RBI & SEBI guidelines , and global regulatory expectations. Ability to translate

vendor control gaps into business and regulatory risk . Excellent communication, presentation, and stakeholder management skills.