TPRM Consultant

Roles and responsibilities:

1. Lead and Perform Vendor Onboarding Assessments
• Lead pre-assessment calls and coordinate assessment activities with stakeholders.
• Perform end-to-end vendor assessments and provide periodic assessment status updates.
• Conduct post-assessment calls and drive assessment closure.
2. Assessment Management and Documentation
• Create and manage Report IDs on the Archer Portal.
• Maintain assessment trackers and ensure timely completion and closure of assigned assessments.
3. POC and Assessment Tool Evaluation
• Perform Proof of Concept (POC) activities for new assessment tools and platforms onboarded for TPRM activities. (will be applicable if new tools are being onboarded- currently for two tools POC is being done)
4. Agreement Review
• Review vendor agreements and contractual documents from an information security and compliance perspective.
5. PCI DSS and DL-SAR Assessments
• Perform PCI DSS and DL-SAR assessments as per the bank-approved checklists and applicable requirements.
• Review PCI DSS AOC, COC and ROC documents, where provided by the vendor/client.
• Review DL-SAR certificates and supporting documentation, where applicable.
6. AI Assessments
• Lead and perform AI assessments based on applicable bank requirements and assessment criteria.
• Perform AI Impact Assessments, where applicable.
7. Project and Stakeholder Management
• Manage assessments/projects end-to-end, including maintaining trackers, monitoring timelines and coordinating with stakeholders.
• Prepare and share periodic/monthly assessment status updates with stakeholders.
8. Regulatory and Checklist Review
• Review and update assessment checklists based on applicable regulatory circulars, guidelines and industry best practices.
9. VRA Report Review
• Perform VRA report reviews against defined checklists and assessment requirements.
• Identify and communicate report discrepancies to the respective auditor for resolution.
• Update review comments in the internal portal and maintain supporting soft evidence for audit and regulatory requirements, including RBI audits.
10. Other Responsibilities

• Perform miscellaneous tasks, documentation and review activities assigned by SPOC.
• Supporting Peers in case of assessments road-blockers.