BENGALURU · FULLTIME
Senior Third-Party Risk Consultant
Ernst Young
Bengaluru · onsite · Posted 4d ago
Sourced from
Undisclosed3–6 yrsfulltimeBengaluru
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
The Senior Consultant AI Third Party Risk Consultant is responsible for independently managing Third Party Security Assessment (TPSA) engagements across complex vendor ecosystems. The role demands deep expertise in TPRM frameworks, supply chain security, and risk lifecycle management, combined with active use of AI-enabled tools for vendor scoring, risk prediction, and control monitoring. The Senior Consultant provides technical depth to assessment delivery, contributes to methodology design, and supports junior analysts in executing high-quality risk evaluations across diverse industry sectors.
Key Responsibilities - Lead and independently execute Third Party Security Assessments (TPSA) across critical, high-risk, and strategic vendor portfolios.
- Conduct comprehensive vendor due diligence including control gap analysis, regulatory compliance validation, and risk-tiered scoring.
- Manage the full risk assessment lifecycle from vendor onboarding due diligence through periodic reviews, escalation management, and exit risk assessments.
- Design and refine vendor risk questionnaires, assessment frameworks, and scoring rubrics aligned to industry standards (ISO 27001, NIST CSF, SOC 2, DORA).
- Perform supply chain risk analysis by identifying nth-party dependencies, concentration risks, and critical vendor failure scenarios.
- Apply AI-enabled vendor risk scoring platforms to prioritize assessments and identify emerging threats.
- Leverage predictive modelling and AI-assisted analytics to forecast vendor risk trajectories and recommend proactive controls.
- Collaborate with procurement, legal, and business stakeholders to embed TPRM controls into vendor contracting and onboarding processes.
- Prepare detailed risk assessment reports, risk ratings, and remediation recommendations for both technical and executive audiences.
- Support the implementation of TPRM automation workflows and AI-driven continuous monitoring capabilities.
- Mentor and guide Staff-level analysts, reviewing work quality and providing technical guidance.
- Bachelors degree in engineering, Technology, Business, Risk Management, or related disciplines.
- Relevant certifications are advantageous (e.g., ISO 42001, CISSP, CISM, CRISC, ISO 27001 Lead Implementer, CTPRP, or equivalent).
- Certified Information Systems Security Professional (CISSP) Broad cybersecurity expertise including risk management and third-party security.
- Certified Information Security Manager (CISM) Information security management and risk governance.
- Certified in Risk and Information Systems Control (CRISC) IT risk identification, assessment, and lifecycle management.
- Certified Third Party Risk Professional (CTPRP) Specialized certification in TPRM frameworks and vendor assessment practices.
- ISO/IEC 27001 Lead Implementer Designing and implementing ISMS controls in vendor assessment contexts.
- Microsoft Certified: Azure AI Engineer Associate (AI-102) Designing and implementing AI solutions relevant to risk automation.
- AWS Certified Machine Learning Specialty Understanding ML pipelines applicable to risk scoring models.
- Google Professional Machine Learning Engineer ML model development and deployment for risk analytics.
- Certified Artificial Intelligence Practitioner (CAIP) Applied AI concepts across business and risk domains.
- ISACA Certified Data Privacy Solutions Engineer (CDPSE) Data privacy risk and AI data governance.
Required Skills and Experience:
- 48 years of experience in third-party risk management, cyber risk, or information security consulting.
- Proven experience executing end-to-end Third-Party Security Assessments across diverse vendor types (cloud, IT, operational).
- In-depth knowledge of TPRM frameworks including NIST SP PHONE_NUMBER, ISO 27036, and sector-specific regulatory requirements.
- Strong understanding of supply chain risk management including vendor tiering, concentration risk, and dependency mapping.
- Use of AI in TPRM processes. Like using AI for assessor evaluation, writing issue descriptions and risk mitigation plans
- Understanding risk from third parties using AI to provide services to client. Looking into AI governance and AI security
- Understanding risk from third parties using AI Agents to provide services to client. Looking into AI governance and AI security
- Use of AI in TPRM processes. Like using AI Agents to build automations in TPRM processes
- Understanding how things like Frontier AI and Mythos will change cybersecurity Lense and how third parties are protecting themselves from these modern threats
- Experience managing the risk assessment lifecycle including risk identification, rating, mitigation planning, and remediation tracking.
- Ability to conduct control gap analysis against ISO 27001, SOC 2, NIST CSF, CIS Controls, and PCI DSS.
- Experience working with GRC platforms for workflow management and risk tracking.
- Strong analytical, written, and presentation skills for technical and non-technical audiences.
- Hands-on experience with AI-enabled vendor risk scoring tools and external threat intelligence platforms.
- Exposure to predictive modelling techniques applied to vendor risk prioritization and breach likelihood scoring.
- Understanding of AI-driven control monitoring frameworks and machine learning-improved continuous assessment cycles.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
AutomationAutomation ToolsAzure Aibi toolsamazon web servicesanalysis toolsAutomatingai governanceAnalyticsai securityAnomaly DetectionCapital MarketsArcherAI ToolsAWS CertifiedAi SolutionsMicrosoft AzureArtificial Intelligence
Section · Company
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on