…

IT consulting (TPRM)

Infosys · IT Services & Consulting

  • Bangalore, India
  • On-site
  • Posted today
  • IT & Infrastructure

About the job

2–4 years of experience in Cybersecurity, Information Security, Third-Party Risk Management (TPRM), or IT Risk.

Hands-on experience in conducting third-party/vendor security risk assessments and identifying security and compliance gaps.

Good understanding of Information Security controls, Cyber Risk, Vendor Risk, and Data Privacy requirements.

Experience reviewing vendor security posture through security questionnaires, evidence/document reviews, and risk assessments.

Working knowledge of security frameworks and standards such as ISO 27001, NIST, SOC 2, PCI-DSS, or related frameworks.

Understanding of key cybersecurity areas including Identity & Access Management, Data Protection, Network Security, Vulnerability Management, Incident Management, and Business Continuity.

Experience in identifying, documenting, and tracking security risks, findings, exceptions, and remediation actions with third parties.

Ability to assess inherent and residual risks associated with vendors/third-party services.

Familiarity with risk registers, risk scoring, control assessments, and remediation tracking.

Exposure to GRC/TPRM tools such as ServiceNow GRC, Archer, OneTrust, ProcessUnity, or similar platforms is desirable.

Good analytical, documentation, and stakeholder communication skills for coordinating with vendors and internal security/risk teams.

Responsibilities

A day in the life of an Infoscion

As part of the Infosys consulting team, your primary role would be to actively aid the consulting team in different phases of the project including problem definition, effort estimation, diagnosis, solution generation and design and deployment
You will explore the alternatives to the recommended solutions based on research that includes literature surveys, information available in public domains, vendor evaluation information, etc. and build POCs
You will create requirement specifications from the business needs, define the to-be-processes and detailed functional designs based on requirements.
You will support configuring solution requirements on the products; understand if any issues, diagnose the root-cause of such issues, seek clarifications, and then identify and shortlist solution alternatives
You will also contribute to unit-level and organizational initiatives with an objective of providing high quality value adding solutions to customers.

If you think you fit right in to help our clients navigate their next in their digital transformation journey, this is the place for you!

Technical requirements

Ability to work with clients to identify business challenges and contribute to client deliverables by refining, analyzing, and structuring relevant data

Awareness of latest technologies and trends
Logical thinking and problem solving skills along with an ability to collaborate
Ability to assess the current processes, identify improvement areas and suggest the technology solutions
One or two industry domain knowledge

Additional responsibilities

TPRM

Educational requirements

Master Of Engineering,Master Of Technology,Bachelor of Engineering,Bachelor Of Technology

Preferred skills

Technology->IDAM->Ping One,Technology->Identity Management->Identity/Account Provisioning and Reconciliation, SPML->Ping Identity

Experience: 2-5 years