Lead Senior Associate Others Bengaluru Engineering as a Service Operate

Deloitte India (South Asia) · Consulting & Professional Services

Digital Risk Consultant (TPRM)

Third-party cyber risk management and vendor security assessments

Security rating and continuous monitoring platforms (Radar, BitSight, Security Scorecard, RiskRecon)

External attack surface and threat monitoring

Third-party cybersecurity incident response

AI-enabled vendor risk evaluation

Cybersecurity frameworks and standards (NIST CSF, NIST AI RMF, ISO 27001, FFIEC, SOC reporting)

Job Description:

Conduct cybersecurity and information security risk assessments of third-party vendors and service providers.

Administer continuous monitoring platforms such as Radar, BitSight, Security Scorecard, and RiskRecon.

Investigate and triage cyber risk alerts from external attack surface management and security rating platforms.

Analyse changes in vendor security posture and determine materiality and business impact.

Participate in and coordinate third-party cybersecurity incident response activities.

Evaluate security, privacy, governance, compliance, and operational risks of AI-enabled vendors and technologies.

Escalate significant findings and facilitate remediation with suppliers and internal stakeholders.

Track vendor remediation commitments through closure and ensure appropriate risk disposition.