Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Find Jobs
Find Jobs Near You – Available Work in Your Location
Find & Apply For Environmental Engineer Jobs in Sunnyvale, California
Browse jobs from a variety of sources below, sorted with the most recently published, nearest to the top. Click the title to view more information and apply online.
Skip to job details
Now viewing: GRC TPRM Assessment and Remediation SME
TC
Tata Consultancy Services Limited
GRC TPRM Assessment and Remediation SME
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
76
out of 100
Average of individual scores
Job Description
We are seeking an experienced Third-Party Risk Management (TPRM) Assessment and Remediation Subject Matter Expert to manage the end-to-end lifecycle of supplier/vendor cybersecurity risk assessments and remediation — from inventory governance through assessment coordination, escalation management, and executive reporting — in a fully remote, client-facing environment. This role serves as the process authority for vendor risk assessments, findings management, and cross-functional remediation, requiring precise, proactive communication to maintain trust with high-visibility stakeholders. ________________________________________ Key Responsibilities 1. Supplier Inventory Management
- Maintain the Supplier Inventory (GRC platform, e.g., SupplierNinja) as the single source of truth for assessment status.
- Tier/filter suppliers requiring reassessment vs. new assessment per program criteria.
- Maintain accurate Direct Responsible Individual (DRI) records in the GRC tool (e.g., OneTrust). 2. Assessment Execution
- Evaluate suppliers against standard frameworks (SIG, CAIQ, NIST
CSF, ISO 27001, SOC 2
) and validate evidence (audit reports, certifications, pen test results).- Confirm DRI ownership and obtain kick-off acknowledgement before initiating assessments.
- Log and track assessment tasks in a workflow tool (e.g., Wrike), including acknowledgement evidence.
- Confirm onsite-assessed suppliers have current-year coverage (e.g., in AirTable).
- Participate in recurring findings-review meetings (e.g., CSFA), advising on policy and evidence standards. 3. Remediation Management
- Own Corrective Action Plans (CAPs) end-to-end: define SLAs, track progress, drive closure with vendors and business owners.
- Coordinate with Legal, Procurement, and InfoSec on remediation timelines and compensating controls. 4. Stakeholder Communication & Escalation
- Run a structured outreach cadence with DRIs (kick-off → 3 follow-ups → 3 escalations to management).
- Track response/non-response rates for every outreach cycle.
- Escalate unresolved/high-risk findings to client leadership and track to closure. 5. Weekly Reporting Deliver a standing weekly metrics report to leadership: outreach volume, response rates, follow-up/escalation status, suppliers approved for (re)assessment, and overall assessment/remediation coverage. Required Qualifications
- 5+ years in cybersecurity, TPRM, GRC operations, or supplier risk coordination.
- Working knowledge of
NIST CSF, ISO 27001, SOC 2, SIG/CAIQ.
- Hands-on experience with
GRC/TPRM
tools (OneTrust, Archer, ServiceNow GRC, SupplierNinja, or similar).- Proven ownership of high-volume, multi-step communication workflows with strict tracking/documentation.
- Excellent written communication for remote, client-facing engagement.
- Experience operating in distributed/remote teams. Preferred Qualifications
Certification:
CTPRP, CRISC, CISA, or CISSP.- Experience with Wrike, AirTable, Jira, or similar tracking tools.
- Prior experience in regulated industries (financial services, healthcare, insurance).
- Track record producing leadership-facing weekly reporting.