Third Party Risk Management - Subcontractor
Bengaluru, Himachal PradeshFull-time6–11 yrsPosted 3 weeks ago
Senior risk role at Birlasoft in Bengaluru and Himachal Pradesh. Needs 6+ years.
About the role
Hands‑on experience with security assessments and control testing. Experience working with global vendors and cross‑region stakeholders.
What you'll do
- Conduct inherent and residual risk assessments for vendors across cybersecurity, data privacy, operational, and compliance domains
- Perform vendor due diligence during onboarding and periodic reviews
- Review vendor‑provided evidence (SOC reports, ISO 27001, SIG, penetration test summaries, etc.)
- Assess vendor alignment with security frameworks such as ISO 27001, NIST, SOC 2, and HP internal security policies
- Identify gaps, document findings, and recommend risk mitigation and remediation plans
What you need
- Risk management
- Internal audit
- Data privacy
- Compliance
- ISO 27001
- Due diligence
Good to have
- Incident response