IT consulting (TPRM)

2–4 years of experience in Cybersecurity, Information Security, Third-Party Risk Management (TPRM), or IT Risk. Hands-on experience in conducting third-party/vendor security risk assessments and identifying security and compliance gaps. Good understanding of Information Security controls, Cyber Risk, Vendor Risk, and Data Privacy requirements. Experience reviewing vendor security posture through security questionnaires, evidence/document reviews, and risk assessments. Working knowledge of security frameworks and standards such as ISO 27001, NIST, SOC 2, PCI-DSS, or related frameworks. Understanding of key cybersecurity areas including Identity & Access Management, Data Protection, Network Security, Vulnerability Management, Incident Management, and Business Continuity. Experience in identifying, documenting, and tracking security risks, findings, exceptions, and remediation actions with third parties. Ability to assess inherent and residual risks associated with vendors/third-party services. Familiarity with risk registers, risk scoring, control assessments, and remediation tracking. Exposure to GRC/TPRM tools such as ServiceNow GRC, Archer, OneTrust, ProcessUnity, or similar platforms is desirable. Good analytical, documentation, and stakeholder communication skills for coordinating with vendors and internal security/risk teams. Technical Requirements: Ability to work with clients to identify business challenges and contribute to client deliverables by refining, analyzing, and structuring relevant data • Awareness of latest technologies and trends • Logical thinking and problem solving skills along with an ability to collaborate • Ability to assess the current processes, identify improvement areas and suggest the technology solutions • One or two industry domain knowledge Responsibilities: A day in the life of an Infoscion • As part of the Infosys consulting team, your primary role would be to actively aid the consulting team in different phases of the project including problem definition, effort estimation, diagnosis, solution generation and design and deployment • You will explore the alternatives to the recommended solutions based on research that includes literature surveys, information available in public domains, vendor evaluation information, etc. and build POCs • You will create requirement specifications from the business needs, define the to-be-processes and detailed functional designs based on requirements. • You will support configuring solution requirements on the products; understand if any issues, diagnose the root-cause of such issues, seek clarifications, and then identify and shortlist solution alternatives • You will also contribute to unit-level and organizational initiatives with an objective of providing high quality value adding solutions to customers. If you think you fit right in to help our clients navigate their next in their digital transformation journey, this is the place for you! Preferred Skills: Technology->IDAM->Ping One,Technology->Identity Management->Identity/Account Provisioning and Reconciliation, SPML->Ping Identity