K

Kyndryl

Managed IT infrastructure and cloud services

Third Party Risk Management - TPRM

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeNoida, Uttar Pradesh, IndiaNo salary listedIn-person

About the Job

Requirements

  • At least 7 years of cybersecurity experience.
  • Deep expertise in third-party risk management program management, vendor risk assessment, and regulatory compliance.
  • Strong knowledge of cybersecurity, application security, cloud posture, and vulnerability management frameworks.
  • Experience in team leadership, mentoring, and program governance.
  • Proficiency with risk reporting tools, dashboards, and metrics tracking.
  • Knowledge of global cyber threats, threat actors, and the tactics, techniques, and procedures used by cyber adversaries.
  • Experience conducting security and risk assessments using security frameworks such as NIST, RMF, ISO, and Common Criteria.
  • Ability to adapt to changing security threats and technologies and stay updated with the latest security trends and best practices.
  • A bachelor's degree in Computer Science, Information Security, or a related field is required.

Responsibilities

  • Own and govern the third-party risk management program, ensuring compliance with organizational security policies and regulatory requirements.
  • Lead third-party risk assessments, evaluating vendors and partners for security posture, compliance, and potential exposure; define security processes for assurance, management, and compliance.
  • Design and review business-driven information technology solutions and business processes to meet cybersecurity and regulatory requirements related to function, protection, assurance, risk management, and compliance.
  • Establish and enforce third-party risk management policies, procedures, and risk frameworks across the organization.
  • Review changing requirements and identify new risks, threats, vulnerabilities, potential anomalous flows, and interactions.
  • Ensure that security subsystems and security architectures for networks, infrastructure, middleware, applications, and systems and service management systems meet business needs.
  • Integrate third-party risk management findings into vulnerability management, application security, and cloud security posture management programs to provide a holistic enterprise risk view.
  • Use vulnerability management processes to identify, evaluate, and prioritize vulnerabilities in computer systems, business processes, networks, and applications, and take steps to remediate or mitigate risks.

Desired Qualifications

  • A master's degree is preferred.
  • Preferred certifications include CRISC, CISA, ISO 27001 Lead Auditor, and Third-Party Risk Management Practitioner/Certified Third-Party Risk Professional (CTPRP).

About the Company

Kyndryl

Managed IT infrastructure and cloud services

Kyndryl provides managed IT infrastructure services for large enterprises, helping them run and modernize their technology environments. Its offerings cover cloud adoption, cybersecurity, security operations, and digital workplace services, all delivered under long-term managed-service contracts. The company works by partnering with major technology providers (including Microsoft) to offer integrated, end-to-end solutions, often complemented by a new security operations center (SOC) and other security capabilities. This focus sets it apart from competitors through scale, enterprise-grade governance, and a history rooted in IBM’s infrastructure services, now independent but aligned with large technology partners. The goal is to support digital transformation by providing reliable, scalable, and secure infrastructure management that enables enterprises to operate efficiently and securely in a cloud-enabled world.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
2021

Recently Posted Jobs

Explore more opportunities at Kyndryl

See more jobs