Control Gap Analyst

We are Hiring

Job Title: Third-Party Cybersecurity Risk Management (3PCRM) Assessor / SME

Experience: 5 to 15 years
Location: Bangalore only {Re-location fine}

Function: Cybersecurity / Third-Party Risk Management

Role Type: Individual Contributor

Contractual Role Type

Third-Party Cyber Risk Assessment

• Conducted end-to-end cyber risk assessments of third-party vendors, service providers, and technology suppliers.
• Evaluated security controls across domains including governance, identity and access management, vulnerability management, incident response, data protection, logging and monitoring, and cloud security.
• Reviewed evidence such as SOC reports, penetration tests, security policies, architecture diagrams, certifications, and independent assessments.
• Assessed inherent risk, control effectiveness, residual risk, and overall risk posture.
• Developed and documented assessment observations, risk statements, and remediation recommendations.
• Validated remediation evidence and supported closure of identified control gaps.
• Conducted assessment activities for critical and high-risk third parties.
• Maintained assessment documentation to support audit and regulatory review activities.
• Attention to detail and scope through assessments to ensure assessments were well documented.

interested candidates share your cv on [email removed]