Consultant- TPRM Job in Bangalore at KPMG

KPMG is hiring for the role of Consultant- TPRM!

Responsibilities of the Candidate:

• Develop a comprehensive third-party risk management program
• Manage vendor/supplier/third party due diligence process including risk assessment, contract negotiation, and ongoing monitoring
• Develop and maintain relationships with vendors/suppliers/third parties to ensure compliance with corporate information security policies and standards
• Establish requirements for third-party access to corporate systems or data
• Identify gaps in existing controls and recommend improvements
• Monitor vendor/supplier/third party performance against established service level agreements (SLAs)
• Develop processes to respond to incidents involving vendors/suppliers/third parties
• Stay current on emerging threats, trends, best practices, industry standards, regulations, etc.

Requirements:

• BE/BTech/MCA/ MBA
• Demonstrate relevant experience in information security, with a focus on vendor/supplier/third-party risk assessment.
• Possess technical expertise in cybersecurity, including standards such as ISO27001, PCI-DSS, ISO22301, privacy, etc.
• Knowledgeable in technical domains like network security, cloud security, application security, control testing, legal and compliance, data privacy, human resource-related controls, supply chain, and environmental security.
• Familiarity with concepts like vendor risk profiling, country risk assessment, and outsourcing/technology regulations.
• Strong auditing skills are desired.
• Exhibit strong problem-solving and logical approach skills.
• Excellent written and verbal communication skills.
• Consistently display technical proficiency.
• Ability to work well in teams.
• Capability to work under pressure, meet stringent deadlines, and perform in tough client conditions, even if it requires extended working hours.
• Willingness to travel within India or abroad for projects/assignments.
• Demonstrate integrity, values, principles, and work ethic, leading by example.
• Possession of industry certifications such as Lead Auditor, CISA, CISSP, CISM, CCSP, CTPRP, and any relevant cloud certifications.