| Company | Deloitte Touche Tohmatsu India LLP |
| Job Title | T&T | Cyber CST | Consultant | Third Party Risk Management |
| Job Requisition ID | 109878 |
| Location | Bengaluru, Karnataka, India |
| Job Function | Cyber / Consulting – Third Party Risk Management (TPRM) |
| Education | Bachelor’s degree in Business, Commerce, Risk Management, Information Systems, Technology, Law or related discipline |
| Preferred Education | Bachelor’s / Master’s in Computer Science, Information Security, Engineering or related field |
| Experience | Prior experience in TPRM, vendor management, risk management, compliance, internal audit or consulting preferred |
| Language Requirement | Professional English + mandatory business proficiency in Spanish or Portuguese |
| Core Role | Support client engagements involving third-party risk assessments, vendor due diligence, compliance reviews, remediation tracking and ongoing monitoring |
| TPRM Activities | Third-party onboarding, inherent risk assessments, due diligence, risk documentation, periodic reassessments and ongoing monitoring |
| Vendor Risk Review | Review third-party responses, evidence, controls and risk indicators across information security, privacy, business continuity, financial and operational risk |
| Due Diligence & Remediation | Track actions, coordinate with stakeholders, document risk decisions and monitor remediation progress |
| Documentation | Prepare risk summaries, assessment notes, dashboards, meeting trackers, governance reports and audit-ready evidence |
| Stakeholder Management | Coordinate with vendors, client teams, business owners, control owners, risk, compliance, procurement, technology and legal teams |
| Risk & Compliance Knowledge | Information security, data privacy, business continuity, operational risk, regulatory compliance, financial risk and third-party governance |
| Framework Knowledge | ISO 27001, SOC Reports, NIST, GDPR/privacy requirements, business continuity standards and outsourcing governance |
| Tools | Microsoft Excel, PowerPoint and Word; GRC/TPRM platforms, workflow tools or ticketing systems are an added advantage |
| Professional Skills | Communication, attention to detail, analytical thinking, ownership and ability to manage multiple deliverables |
| Third-Party Lifecycle | Onboarding, risk tiering, due diligence, periodic reviews, issue tracking, termination and offboarding controls |
| Certifications | ISO 27001, ISO 22301 or similar certifications are an added advantage |
| Work Environment | Global/regional TPRM programs and matrixed consulting environment |
