T&T | Cyber: CST | Consultant | Third Party Risk Management | Pune

T&T | Cyber: CST | Consultant | Third Party Risk Management | Pune
• Job requisition ID : 108649 
• Location: Pune
• Entity: Deloitte Touche Tohmatsu India LLP 

The Team  

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks: Learn more about Cyber | Deloitte

Your Work Profile 

As a TPRM Consultant, you will support client engagements focused on third-party risk assessments, vendor due diligence, compliance reviews, remediation tracking, and ongoing monitoring. You will be expected to establish strong working relationships with client teams and third-party stakeholders while delivering clear, well-documented, and high-quality outputs.

This role requires professional proficiency in English, along with mandatory business proficiency in Spanish or Portuguese, to support effective communication with clients and stakeholders across English-speaking and Latin American or Portuguese-speaking environments.

Key Skills Required 

• Support end-to-end TPRM activities – Assist with third-party onboarding, inherent risk assessments, due diligence coordination, risk review documentation, periodic reassessments, and ongoing monitoring activities.
• Conduct vendor risk and compliance reviews – Review third-party responses, supporting evidence, control documentation, and risk indicators across areas such as information security, privacy, business continuity, financial viability, compliance, and operational risk.
• Coordinate due diligence and remediation – Track open actions, follow up with stakeholders, document risk decisions, validate remediation progress, and support timely closure of findings in line with agreed timelines.
• Prepare client-ready documentation – Develop risk summaries, assessment notes, meeting trackers, dashboards, status updates, governance reports, and audit-ready evidence packs.
• Engage with multilingual stakeholders – Communicate effectively in English and Spanish or Portuguese with client teams, vendors, and regional stakeholders to gather information, clarify requirements, and support timely completion of TPRM deliverables.
• Languages: English professional proficiency; Spanish or Portuguese business proficiency is mandatory.

• TPRM / vendor risk experience: Experience in Third-Party Risk Management, supplier or vendor risk management, due diligence, risk assessments, issue management, risk acceptance, and ongoing monitoring.
• Risk and compliance knowledge: Understanding of key risk domains, including information security, data privacy, business continuity, operational risk, regulatory compliance, financial risk, and outsourcing or third-party governance.
• Assessment and documentation skills: Ability to review questionnaires, policies, procedures, control evidence, and third-party responses, and translate observations into clear risk narratives and actionable recommendations.

• Stakeholder management: Strong coordination skills with the ability to follow up with vendors, client teams, business owners, control owners and risk stakeholders across regions.
• Tools and reporting: Working knowledge of Microsoft Excel, PowerPoint and Word; experience with GRC / TPRM platforms, workflow tools or ticketing systems will be an added advantage.
• Professional skills: Strong written and verbal communication, attention to detail, analytical thinking, ownership mindset, and the ability to manage multiple deliverables within a consulting environment.
• Prior consulting experience or experience supporting global / regional TPRM programs.
• Exposure to third-party lifecycle processes, including onboarding, risk tiering, due diligence, periodic reviews, issue tracking, and termination or offboarding controls.
• Familiarity with common risk and control frameworks, such as ISO 27001, SOC reports, NIST, GDPR or privacy requirements, business continuity standards, and outsourcing governance expectations.
• Ability to work with business, risk, compliance, procurement, technology and legal stakeholders in a matrixed environment.

• Bachelor’s degree in business, Commerce, Risk Management, Information Systems, Technology, Law or a related discipline.
• Relevant certifications, such as ISO 27001, ISO 22301, or similar credentials, will be considered an added advantage.
• Prior experience in TPRM, vendor management, risk management, compliance, internal audit or consulting is preferred.
• Bachelor’s or Master's degree in Computer Science, Information Security, Engineering, or related field.