IT&Data CS 3rd Party Risk Mgt

Role Title- Cybersecurity 3rd party risk management

About the Role

Responsible for managing cybersecurity risks associated with suppliers, vendors, service providers and partners, ensuring risks are identified, assessed, monitored and mitigated .

Location | Experience | How to Apply:

Location: Hyderabad

Experience: 5-8 Years

How to Apply: Interested candidates can also apply directly via the Infosys Careers Page https://career.infosys.com/jobscompanyhiringtype=IL&countrycode=IN&searchJob= 253928

Global stakeholder exposure

Opportunity to be part of a large-scale transformation journey

Good to have experience in consumer goods, manufacturing, retail, or related industry domains.

Technical Skills Required

Experience or exposure across the third-party lifecycle, including:

- Vendor due diligence reviews

- Security questionnaires

- Control assessments

- Evidence validation

- Supporting business with contract negotiations

- Risk identification and risk rating

- Experience reviewing ISO 27001 certifications and SOC2 reports.

- Cybersecurity and risk assessment knowledge - ISO 27001, NIST, SOC2 and vendor security controls

- Risk reporting and stakeholder management

- Strong analytical and communication skills

Key Responsibilities

-

- Maintain and continuously improve TPRM framework

- Perform supplier cyber risk assessments

-Perform due diligence assessments

-Risk classification and tiering

- Track remediation and monitor third-party risks

- Partner with Procurement, Legal and Security teams

- Develop risk dashboards and executive reporting

Support vendor offboarding