Third-Party Risk Management (TPRM) Consultant

Join Tsaaro as a Cyber GRC & Third-Party Risk Management (TPRM) Consultant Drive Cyber Resilience. Build Trust. Deliver Impact. Are you passionate about helping organizations strengthen their cyber governance, manage third-party risks, and achieve compliance with global security standards? At Tsaaro, we go beyond compliance, we help organizations build resilient governance, risk, and compliance (GRC) programs that enable secure business growth. We are looking for a Cyber GRC & Third-Party Risk Management (TPRM) Consultant who thrives in consulting environments, enjoys solving complex security challenges, and can deliver practical, risk-based solutions to clients. About Tsaaro At Tsaaro, privacy and cybersecurity are at the heart of everything we do. Our team of privacy consultants and cybersecurity specialists collaborates to help organizations build robust governance frameworks, strengthen security programs, and manage evolving cyber risks. Our consulting approach focuses on delivering practical, business-aligned solutions that help clients strengthen security posture, manage vendor risks, achieve compliance, and build long-term resilience. Your Role: Cyber GRC & Third-Party Risk Management (TPRM) Consultant As a Consultant, you will work closely with clients to establish governance frameworks, assess cyber risks, conduct third-party risk assessments, and support compliance initiatives across multiple regulatory and industry standards. Key Responsibilities - Conduct end-to-end Third-Party Risk Management (TPRM) assessments across vendors, suppliers, and service providers. - Perform vendor security reviews, due diligence assessments, and security questionnaires. - Evaluate third-party cybersecurity controls and identify risks, gaps, and mitigation strategies. - Develop and implement Third-Party Risk Management frameworks, policies, and procedures. - Support clients in implementing Governance, Risk & Compliance (GRC) programs aligned with business objectives. - Perform cyber risk assessments, control maturity assessments, and compliance gap analyses. - Assist clients in implementing and maintaining ISO 27001, ISO 27701, NIST CSF, CIS Controls, and other security frameworks. - Support audit readiness initiatives including internal audits, control testing, and evidence collection. - Develop risk registers, risk treatment plans, and executive reports. - Collaborate with cross-functional teams to improve governance processes and strengthen organizational cyber resilience. - Contribute to cybersecurity consulting engagements involving policy development, control implementation, and regulatory compliance. - Provide recommendations for continuous improvement in vendor risk governance and cybersecurity practices. Requirements - 2–4+ years of experience in Cyber GRC, Third-Party Risk Management (TPRM), Information Security, or Cybersecurity Consulting. - Strong understanding of Third-Party Risk Management methodologies and vendor risk assessment processes. - Hands-on experience conducting vendor security assessments and reviewing security controls. - Working knowledge of ISO 27001, ISO 27701, NIST CSF, CIS Controls, SOC 2, or similar security frameworks. - Familiarity with governance, risk management, compliance processes, and cybersecurity regulations. - Experience with risk assessments, audit support, policy development, and control implementation. - Excellent analytical, documentation, stakeholder management, and client communication skills. - Professional certifications such as ISO 27001 Lead Implementer/Lead Auditor, CRISC, CISA, CISM, Security+, or similar are preferred. - A collaborative, solution-oriented mindset with the ability to manage multiple client engagements. Benefits Why Join Tsaaro? - Work with one of India's fastest-growing privacy and cybersecurity consulting firms. - Gain exposure to global clients across diverse industries. - Work on strategic Cyber GRC and Third-Party Risk Management engagements. - Accelerate your career with mentorship and leadership opportunities. - Hybrid work flexibility. - Continuous learning support through certifications and professional development programs. From the Tsaaro Team "At Tsaaro, we believe cybersecurity is built on strong governance, informed risk decisions, and trusted partnerships. If you're excited about helping organizations strengthen their cyber resilience while working on meaningful consulting engagements, we'd love to have you on our team." Ready to Advance Your Cyber GRC Career? Apply now and become part of Tsaaro's mission to build secure, resilient, and compliant organizations.