Associate Director - Third Party Risk Management - Big4

Description:

About the job

Job Title: Associate Director - Third Party Risk Management (TPRM)

Location: Mumbai

Experience: 9+ Years

Joining: Immediate joiners preferred

Preference: Big 4 experience; GCC experience highly desirable

Role Overview:

We are seeking an experienced Associate Director TPRM to lead and strengthen our Third-Party Risk Management practice.

The ideal candidate will bring strong expertise across TPRM, GRC, ISMS, and ISO 27001, with demonstrated experience in managing large-scale risk programs, stakeholder engagement, and delivering high-quality advisory engagements.

Key Responsibilities:

- Lead and manage end-to-end Third-Party Risk Management programs, including onboarding, due diligence, assessments, monitoring, and reporting.

- Oversee risk assessments across domains such as information security, operational risk, compliance, financial risk, and business continuity.

- Design, enhance, and implement TPRM frameworks, policies, methodologies, and assessment templates.

- Drive advisory engagements related to ISO 27001, ISMS implementation, and GRC processes.

- Work closely with global and regional teams, including stakeholders from GCCs, to deliver integrated risk solutions.

- Conduct maturity assessments and develop roadmaps for TPRM and GRC transformation initiatives.

- Manage client relationships, lead presentations, and provide insights for risk mitigation and process improvement.

- Supervise and mentor team members, ensuring project quality, timely delivery, and compliance with internal standards.

- Support business development activities, including proposals, solutioning, and client discussions.

Required Skills & Experience:

- 9+ years of experience in TPRM, GRC, ISMS, and ISO 27001 implementations or audits.

- Prior experience in the Big 4 is strongly preferred.

- Exposure to GCC environments and large global organizations is highly desirable.

- Strong understanding of regulatory requirements, cybersecurity controls, and third-party lifecycle management.

- Experience with TPRM platforms/tools (e.g., Archer, MetricStream, OneTrust, ServiceNow VRM, ProcessUnity) is an advantage.

- Excellent communication, stakeholder management, and leadership skills.

- Ability to manage multiple projects, lead teams, and drive risk transformation initiatives