Third-Party Risk Management (TPRM) Analyst

Location: Chennai
Experience: 5–10 Years
Band: BPO 3/4
Salary: Up to ₹12 LPA
Shift: Flexible – Must be comfortable working in rotational and night shifts
Work Mode: Not specified

Job Overview

We are looking for an experienced Third-Party Risk Management (TPRM) Analyst to assess, evaluate, and manage risks associated with third-party vendors, suppliers, and business partners. The candidate will be responsible for conducting third-party due diligence, evaluating risk exposure, assigning risk ratings, and ensuring compliance with internal policies, regulatory requirements, and industry standards.

The role requires close coordination with Procurement and business stakeholders to identify potential risks, recommend mitigation measures, and maintain accurate risk documentation and audit trails.

Key Responsibilities

1. Third-Party Risk Assessment

• Review and assess risks associated with third-party vendors, suppliers, and business partners.

• Conduct third-party due diligence and impact assessments.

• Evaluate third parties and classify them into appropriate risk categories: High, Medium, or Low.

• Identify potential operational, financial, legal, regulatory, and compliance risks.

• Recommend appropriate risk mitigation strategies based on assessment findings.

2. Compliance & Risk Management

• Ensure third parties comply with organizational TPRM policies, regulatory requirements, and contractual obligations.

• Review SOC 2 controls, compliance documentation, and other relevant risk assessment reports.

• Identify control gaps and follow up on remediation actions.

• Support risk governance activities and ensure adherence to internal risk management frameworks.

3. Third-Party Due Diligence & Monitoring

• Conduct and manage end-to-end third-party due diligence activities.

• Use leading Third-Party Risk Management (TPRM) tools to perform assessments and track risk status.

• Maintain and update third-party risk databases and repositories.

• Monitor risk mitigation milestones and follow up on pending actions.

• Support vendor qualification and ongoing vendor risk monitoring.

4. Stakeholder Collaboration

• Collaborate with Procurement, Legal, Compliance, and business stakeholders to gather relevant information.

• Work with internal teams to resolve risk-related queries and assessment gaps.

• Support the development and implementation of risk mitigation plans.

• Act as a point of contact for TPRM-related inquiries and assessment updates.

5. Reporting & Documentation

• Prepare reports covering third-party risk assessments, due diligence status, risk ratings, and mitigation activities.

• Maintain accurate documentation, assessment records, and audit trails.

• Ensure timely updates to risk repositories and reporting dashboards.

• Support internal and external audits by providing relevant risk documentation.

Required Skills & Competencies

• 5–8 years of relevant experience in Third-Party Risk Management (TPRM), third-party due diligence, or vendor risk assessment.

• Strong understanding of risk management principles and third-party risk analysis.

• Hands-on experience with supplier due diligence and third-party risk assessment processes.

• Knowledge of SOC 2 controls, compliance requirements, and risk mitigation practices.

• Familiarity with leading TPRM tools and risk management platforms.

• Experience working with ERP systems and risk assessment tools.

• Strong analytical, assessment, and problem-solving skills.

• Excellent attention to detail and documentation capabilities.

• Strong verbal and written communication skills.

• Ability to collaborate effectively with Procurement and business stakeholders.

• Familiarity with international contracts and regulatory requirements is preferred.

Mandatory Skills

• Third-Party Risk Management (TPRM)

• Risk Management

• Third-Party Risk Analysis

• Supplier Due Diligence

• SOC 2 Controls

• Compliance & Risk Assessment

Good-to-Have Skills

• Vendor Management

• Vendor Qualification

• TPRM Tools

• ERP Systems

• International Contracts

• Regulatory Compliance

• Legal / Paralegal Knowledge or Certification

Education & Qualification

• Minimum 15 years of regular, full-time education (10+2+3).

• Bachelor’s degree in Business, Law, Finance, or a related field.

• Legal or paralegal certification will be an added advantage.

Shift & Work Requirements

• Candidates must be flexible to work in rotational and night shifts.

• Must be comfortable working in a dynamic, stakeholder-facing business environment.

Additional Information

• Ex-TCS employees are not eligible to apply.

• PAN and Date of Birth (DOB) are required for candidate profile creation. These details should be shared securely through the approved recruitment process.

Ideal Candidate Profile: Candidates with hands-on experience in third-party risk assessments, supplier due diligence, SOC 2 compliance, risk classification, and TPRM tools, preferably within a corporate, financial services, or shared services environment.