Third-Party Risk Management (TPRM) Analyst

Job Overview

We are looking for an experienced Third-Party Risk Management (TPRM) Analyst to support the assessment, monitoring, and management of risks associated with third parties, suppliers, and vendors.

The ideal candidate will have strong experience in Third-Party Risk Management, Third-Party Due Diligence, Supplier Due Diligence, Risk Assessment, Risk Classification, Vendor Risk Management, SOC 2 Controls and Compliance.

The role involves reviewing third-party risks, conducting impact assessments, classifying third parties based on risk levels, ensuring compliance with internal policies and regulatory requirements, and working closely with Procurement and Business Stakeholders to develop effective risk mitigation strategies.

Key Responsibilities

Third-Party Risk Assessment

• Review and assess risks associated with third parties, suppliers, and vendors.

• Conduct third-party risk assessments and impact assessments.

• Analyze third-party risk factors and determine appropriate risk levels.

• Classify third parties into High, Medium, and Low risk categories.

• Identify potential risks and recommend appropriate mitigation strategies.

• Conduct ongoing monitoring of third-party risks and risk mitigation activities.

Third-Party Due Diligence

• Conduct comprehensive third-party due diligence in accordance with company policies and regulatory requirements.

• Review third-party information, documentation, contracts, and risk-related data.

• Perform supplier due diligence and vendor risk assessments.

• Track due diligence activities, findings, remediation actions, and risk mitigation milestones.

• Ensure third parties meet defined TPRM requirements before and during engagement.

• Maintain accurate records of due diligence reviews and outcomes.

TPRM Tools & Systems

• Work with leading Third-Party Risk Management (TPRM) tools available in the market.

• Maintain and update third-party risk databases and repositories.

• Use ERP and TPRM systems to manage risk information and third-party records.

• Ensure third-party risk information is accurate, complete, and up to date.

• Support automation and process improvements within TPRM activities.

Compliance & Risk Management

• Ensure third parties comply with TPRM requirements, company policies, internal controls, and applicable regulations.

• Assess third-party compliance risks and identify potential control gaps.

• Demonstrate knowledge of SOC 2 controls and compliance requirements.

• Support risk mitigation and remediation activities.

• Monitor compliance-related issues and escalate significant risks appropriately.

• Maintain appropriate documentation and evidence to support audits and compliance reviews.

Stakeholder Collaboration

• Work closely with Procurement, Business Stakeholders, Legal, Compliance, and other internal teams.

• Gather required information and documentation from internal stakeholders and third parties.

• Support stakeholders in understanding and resolving third-party risk-related issues.

• Develop and support appropriate risk mitigation strategies.

• Act as a point of contact for TPRM-related questions and inquiries.

• Maintain strong professional relationships with stakeholders.

Reporting & Documentation

• Prepare reports on TPRM databases, due diligence status, risk levels, risk assessments, and mitigation strategies.

• Maintain accurate third-party risk records and repositories.

• Maintain complete and accurate audit trails and supporting documentation.

• Track outstanding risk assessments, due diligence activities, and remediation milestones.

• Provide regular updates and reports to relevant stakeholders.

• Ensure documentation meets internal governance, compliance, and audit requirements.

Required Skills

• 5–10 years of overall professional experience, with strong relevant experience in Third-Party Risk Management (TPRM) and third-party due diligence.

• Strong experience in Third-Party Risk Analysis and Risk Assessment.

• Hands-on experience in Supplier Due Diligence and Vendor Risk Management.

• Strong knowledge of risk classification and risk rating, including High, Medium, and Low risk categories.

• Strong understanding of SOC 2 controls and compliance.

• Experience working with TPRM tools and ERP systems.

• Strong analytical and problem-solving skills with excellent attention to detail.

• Excellent verbal and written communication skills.

• Strong stakeholder management and collaboration skills.

Must-Have Skills

• Third-Party Risk Management

• Third-Party Risk Analysis

• Supplier Due Diligence

• Third-Party Due Diligence

• Risk Assessment

Good-to-Have Skills

• Vendor Management

• Vendor Qualification

• Vendor Risk Management

• TPRM Tools

Educational Qualification

• Minimum 15 years of regular, full-time education (10+2+3).

• Bachelor's degree in Business, Law, Finance, or a related field.

• Legal or paralegal certification is an added advantage.

Other Requirements

• Candidate must be flexible to work in rotational and/or night shifts as per business requirements..

• Ex-TCS employees are not eligible to apply.

• PAN and Date of Birth (DOB) are required for Employee Profile (EP) creation.