01
TRPD-26-05594
Third-Party Risk Management (TPRM) Cybersecurity Assessment Specialist
Hire a cybersecurity/technology risk professional to run third-party cybersecurity assessments end-to-end: review supplier questionnaires and evidence (SOC1/SOC2, ISO 27001, pen test and vulnerability reports, BCP/DR docs), assess inherent vs residual risk, identify control gaps across core security domains (IAM, vuln/patch, cloud, appsec, IR, data protection), drive remediation/closure of findings, and document results in TPRM/GRC tools while supporting audit/regulatory expectations and stakeholder reporting.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 10 years and Maximum 15 years
Role overview
Why This Role Matters.
Hire a cybersecurity/technology risk professional to run third-party cybersecurity assessments end-to-end: review supplier questionnaires and evidence (SOC1/SOC2, ISO 27001, pen test and vulnerability reports, BCP/DR docs), assess inherent vs residual risk, identify control gaps across core security domains (IAM, vuln/patch, cloud, appsec, IR, data protection), drive remediation/closure of findings, and document results in TPRM/GRC tools while supporting audit/regulatory expectations and stakeholder reporting.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Review and evaluate supplier responses to security questionnaires and assessment frameworks against defined control requirements.
03
Analyze supporting evidence such as SOC 1/SOC 2 reports, ISO 27001 certificates, penetration testing reports, policies, vulnerability reports, business continuity documentation and security assessments.
04
Identify control gaps, cybersecurity risks and potential areas of exposure; assess the inherent and residual risk associated with third parties.
05
Validate remediation plans and track open findings/issues through to closure.
06
Support risk-based decision making, including identification of compensating controls, risk acceptance and remediation requirements.
07
Perform assessments of third parties providing critical, high-risk or technology-enabled services.
08
Document assessment results, risk ratings, findings and recommendations in TPRM platforms/tools.
09
Engage with third-party stakeholders and internal teams to obtain clarifications, evidence and remediation updates.
10
Support escalation and reporting of overdue or high-risk findings to relevant stakeholders.
11
Contribute to continuous improvement of TPRM assessment methodologies, processes, control frameworks and assessment templates.
12
Support regulatory and audit requirements related to third-party cybersecurity and operational resilience.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
TPRM
Required
02
Third-Party Risk Management
Required
03
Third Party Risk
Required
04
Vendor Risk Management
Required
05
VRM
Required
06
Cybersecurity Assessment
Required
07
Technology Risk
Required
08
IT Risk
Required
09
GRC
Required
10
SOC 1
Required
11
SOC 2
Required
12
ISO 27001
Required
13
NIST CSF
Required
14
CIS Controls
Required
15
PCI DSS
Required
16
IAM
Required
17
PAM
Required
18
Vulnerability Management
Required
19
Patch Management
Required
20
Network Security
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Third-Party Risk Management (TPRM) / third-party cybersecurity assessments
Cybersecurity risk assessment methodologies (inherent vs residual risk, risk rating)
Control assessment/control testing and gap analysis
Security questionnaire review and evidence-based assessment
Ability to interpret SOC 1/SOC 2 reports, audit reports, penetration testing reports, security certifications
Knowledge across cybersecurity domains: governance, IAM/PAM, vulnerability & patch management, network/infrastructure security, application/SDLC security, data protection & privacy, cloud security, security monitoring & incident response, BCP/DR, cryptography & key management
Findings management: remediation validation, tracking issues to closure, escalation/reporting
Strong documentation and stakeholder management
Ability to manage multiple assessments and meet SLA/turnaround requirements
Experience assessing against frameworks/standards (one or more): ISO 27001, NIST CSF, CIS Controls, SOC 2, PCI DSS
Preferred
Nice to Have
Certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer (or equivalent)
Experience with TPRM/GRC platforms/tools
Financial services/banking/insurance experience
Knowledge of regulatory expectations for third-party risk and operational resilience
Cloud service provider and SaaS vendor assessments
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
This role has closed
We’re no longer accepting applications for this position — but we place people in comparable roles regularly.
See what’s open now