TPRM- Manager- Bangalore

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

Job Description

The Information Security Vendor/Supplier/Third Party Manager is responsible for managing the security of all third party relationships. This includes assessing and mitigating risk, developing security requirements and guidelines, and overseeing the implementation of security controls. The Manager is also responsible for ensuring that appropriate and effective security measures are in place throughout the vendor/supplier/third party lifecycle.

1. Develop a comprehensive third-party risk management program
2. Manage vendor/supplier/third party due diligence process including risk assessment, contract negotiation, and ongoing monitoring
3. Develop and maintain relationships with vendors/suppliers/third parties to ensure compliance with corporate information security policies and standards
4. Establish requirements for third party access to corporate systems or data
5. Identify gaps in existing controls and recommend improvements
6. Monitor vendor/supplier/third party performance against established service level agreements (SLAs)
7. Develop processes to respond to incidents involving vendors/suppliers/third parties
8. Stay current on emerging threats, trends, best practices, industry standards, regulations, etc.