Understanding the requirement to conduct comprehensive information security risk assessment of 3rd party service provider (TPRM) who will provide new services/applications.
Plan and conduct periodic assessment of existing vendors as per organization s TPRM framework
Coordination with the business team, vendor and required stakeholders to carry out end to end risk assessment
Due diligence and validation of responses evidences on Infosec controls, architecture review of technical integration of 3 rd party services which to be onboarded.
Must be having basic knowledge about information security risks for systems, applications, technical environments, networks, cloud infrastructure, projects, and workflows.
Classify identified information security risk and record those potential risk that could impact the organisation, and publish the report to management.
Provide recommendation on highlighted information security risk, follow ups and track for closure
Knowledge and experience in Information security risk standards and SEBI regulatory circulars for TPRM perspective.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT & Information Security - OtherRole: IT & Information Security - OtherEmployement Type: Full time