Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Engaged Employer

Crisil

Compare

3.6

based on 1.6k Reviews

Video summary

447 Crisil Jobs

Information Security Associate

CRISIL

3.6

based on 1.6k Reviews

1-5 years

Mumbai

1 vacancy

Information Security Associate

Crisil

posted 16d ago

Job Role Insights

Flexible timing

Key skills for the job

Operations Procurement Risk Management Information Security Financial Due Diligence Business Continuity

+ 4 more

Job Description

Conduct comprehensive risk assessments of third-party vendors, including evaluating their information security practices, operational capabilities, and compliance with legal and regulatory requirements
Perform due diligence on prospective and existing vendors, ensuring they meet the organizations standards for security, privacy, and business continuity.
Continuously monitor third-party risk exposure and create regular reports on the risk status of vendors. Identify and escalate potential issues to management.
Review and manage vendor contracts, ensuring that appropriate risk management clauses and service-level agreements (SLAs) are in place.
Collaborate with internal stakeholders and vendors to develop and implement risk mitigation strategies. Recommend corrective actions or improvement plans for third-party vendors with identified risks
Assist in the development and maintenance of third-party risk management policies, procedures, and frameworks in alignment with industry best practices and regulatory requirements.
Work closely with internal teams (e. g. , Legal, Procurement, Compliance, IT Security) to ensure a unified approach to third-party risk management
Ensure compliance with relevant regulations, standards, and guidelines (e. g. , GDPR, ISO 27001, NIST, PCI-DSS) related to third-party risk management.
Conduct periodic vendor audits to verify compliance with contractual obligations and organizational policies
Assist in the investigation and resolution of third-party risk incidents, including data breaches or service disruptions.