JobCubby JobCubby
Sign up
Birlasoft Limited

Technical Lead-Cybersecurity

Birlasoft Limited Noida, Uttar Pradesh, India

IT Services and IT Consulting · 10,001+ employees

15 h ago
security Senior (5-10 yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The Technical Lead will manage the organization's third-party cybersecurity risk program by conducting end-to-end vendor risk assessments and evaluating security controls. They will collaborate with cross-functional teams to mitigate risks, ensure regulatory compliance, and monitor vendor security posture throughout the engagement lifecycle.

What they look for

Third-Party Risk Management Vendor Security Assessments Cyber Risk Management Risk Remediation Tracking Security Due Diligence Risk Analysis Vendor Onboarding Risk Governance Regulatory Compliance Audit Support Security Questionnaires SIG Reviews Security Policy Control Assessment Attack Surface Monitoring Supply Chain Management

Requirements

The role requires extensive experience in Third-Party Risk Management (TPRM) and a strong understanding of security frameworks such as ISO 27001, NIST, and SOC2. Candidates must be proficient in performing risk assessments, managing security documentation, and driving continuous improvement in vendor risk governance.

Full description

Area(s) of responsibility

Role Summary

We are seeking an experienced Third-Party Risk Management (TPRM) Specialist to manage and strengthen the organization's third-party cybersecurity risk program. The candidate will be responsible for conducting vendor risk assessments, evaluating security controls, monitoring third-party risks, ensuring regulatory compliance, and working closely with business, procurement, legal, privacy, and technology teams to mitigate risks associated with vendors, suppliers, and service providers.

Key Responsibilities

  • Perform end-to-end Third-Party Risk Assessments for vendors, suppliers, partners, and service providers.
  • Evaluate vendor security controls, policies, procedures, certifications, and compliance posture.
  • Assess cybersecurity risks associated with new and existing third-party engagements.
  • Review security questionnaires, SIG assessments, due diligence reports, SOC reports, ISO certifications, and other security documentation.
  • Conduct inherent risk and residual risk assessments and provide risk ratings and recommendations.
  • Monitor vendor risk posture and track remediation activities until closure.
  • Collaborate with Procurement, Legal, Compliance, Privacy, Risk Management, and Security teams during vendor onboarding and periodic reviews.
  • Review vendor compliance against security standards such as ISO 27001, NIST, SOC2, GDPR, PCI-DSS, and other applicable frameworks.
  • Manage third-party risk registers, findings, exceptions, and remediation tracking.
  • Analyze external attack surface, cyber ratings, and breach intelligence related to third parties.
  • Support contract reviews, security requirements, and vendor security clauses.
  • Prepare risk assessment reports, executive summaries, dashboards, and management presentations.
  • Support internal and external audits related to third-party risk programs.
  • Drive continuous improvement initiatives for vendor risk governance and assessment processes.
  • Work with stakeholders to develop risk mitigation plans and monitor execution.

Required Skills

  • Third-Party Risk Management (TPRM)
  • Vendor Security Assessments
  • Cyber Risk Management, Risk Remediation Tracking
  • Security Due Diligence Reviews
  • Risk Analysis & Risk Rating Methodologies
  • Vendor Onboarding & Risk Governance
  • Regulatory Compliance & Audit Support
  • Security Questionnaires & SIG Reviews
  • Security Policy & Control Assessment
  • Attack Surface & External Risk Monitoring
  • Security Reporting & Dashboarding
  • Understanding of Supply Chain Management

Similar roles