Risk Management Role - Third Party Risk/Outsourcing Risk/IT Risk - BFSI/NBFC/FinTech (5-12 yrs)

We have been scouting a young professional with a background of IT Risk or IT Third party Risk or Vendor Risk Management background.

Location : Mumbai

KRA's :

1. Develop and maintain the organization's third-party risk management framework, including policies, standards, and procedures that are aligned with relevant laws, regulations, and industry standards pertaining to Info security.

2. Assess the Info security effectiveness of third party vendors such as (but not limited to) communicationcand network security, vulnerability management, data privacy, access control, BCP, DR and incident management.

3. Conduct information security risk assessments of third-party vendors and develop risk mitigation strategies.

4. Monitor third-party vendors' compliance with contractual information security requirements and perform regular Info security assessments and audits.

5. Manage a team of Info security professionals responsible for third-party risk management.

6. Understanding and have experience on regulatory guidelines such as RBI Master directions, outsourcing guidelines etc.

Required / Must Have :

a) 5-8 years of experience in Info security, with a focus on Third-party risk management.

b) Experience in conducting third-party Info security assessments and audits.

c) Relevant certifications such as ISO 27001, ISO 27701, CISA, CISM, or other security-related certifications are highly preferred.