{"id":2131256,"url":"https://alion.io/job/cognizant-cyber-security-tprm-analyst","title":"Cyber Security- TPRM Analyst","company":{"id":85,"name":"Cognizant","domain":"cognizant.com","url":"https://alion.io/company/cognizant","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Cognizant Careers","truth_index":{"grade":"A","score":88,"open_postings":130,"ghost_share":0.008,"stale_share":0.662,"repost_share":0.008,"time_to_fill_p50_days":20,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":28000,"period":"year","method":"role_seniority_country_cell","sample_n":12},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Jira","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"SharePoint","optional":false},{"name":"ISO 27001","optional":true},{"name":"NIST CSF","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:47:37Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-24T07:18:20Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"#Cyber Security Experts#\nTPRM Analyst\n Job Title: Third-Party Cybersecurity & Risk Management (3PCRM) Analyst / SME\nExperience: 5 to 12 yearsLocation: Bangalore only {Re-location fine}\n\nFunction: Cybersecurity Risk / Third-Party Risk Management\nRole Type: Individual Contributor\nRole Overview\nWe are looking for an experienced Third-Party Cybersecurity & Risk Management (3PCRM) professional to support third-party cybersecurity assessments, intake and triage activities, quality assurance, workflow management, and stakeholder coordination. The role will be responsible for ensuring assessments are appropriately scoped, executed, documented, and completed in accordance with internal processes and audit requirements.\nKey Responsibilities\n1. Third-Party Risk Intake & Assessment Triage\nReview and triage completed intake forms, IRA, TPSD, assessment history, and related documentation to determine whether a third-party cybersecurity assessment is required.\nValidate assessment scope, applicability, and required assessment type based on third-party risk and organizational requirements.\nEnsure completion of assessment planning and information-gathering artifacts.\nIdentify missing or incomplete information and coordinate with stakeholders/vendors for resolution.\n 2. Cybersecurity Control Assessment Management\nInitiate and action Control Assessments (CAs) based on defined processes.\nDelegate assessments to assigned assessors and advance assessment workflows within the designated platform.\nReview questionnaire responses for completeness, accuracy, and alignment with applicable controls.\nPush assessments to the next workflow stage or return/reject them to vendors when responses or evidence are insufficient.\nEvaluate whether previous assessments can be leveraged and support appropriate scoring or determination of assessment applicability/out-of-scope status.\nTrack assessment progress and ensure activities are completed within defined SLAs.\n3. Quality Assurance & Assessment Review\nPerform QA reviews of assessor workpapers, control responses, evidence, assessment notes, and final reports.\nReview assessor commentary to ensure it is:\nRelevant to the applicable control\nClear and understandable\nComplete and adequately supported by evidence\nConsistent with assessment requirements\nIdentify documentation, evidence, control, and quality gaps and drive appropriate remediation.\nReview final assessment artifacts and tracking records for completeness and audit readiness.\nEnsure assessments comply with internal policies, procedures, methodology, and audit requirements.\n4. Stakeholder & Workflow Management\nTriage, action, and route engagement and process-related inquiries received through the 3PCRM mailbox.\nCoordinate with internal stakeholders, assessors, vendors, application owners, procurement teams, and risk teams as required.\nCommunicate assessment assignments, status, workflow requirements, and outstanding actions.\nFollow up with stakeholders to resolve assessment blockers and maintain SLA adherence.\nMaintain accurate assessment status and reporting information.\n5. Third-Party Cyber Risk & Compliance\nSupport identification and evaluation of cybersecurity risks associated with third parties.\nEnsure appropriate cybersecurity controls are assessed based on vendor risk, service scope, data access, and business criticality.\nSupport audit and compliance requirements related to third-party risk management.\nMaintain accurate assessment documentation and evidence to support internal and external audits.\nContribute to continuous improvement of the 3PCRM assessment and QA process.\nRequired Skills & Experience\n5+ years of experience in Third-Party Risk Management, Cyber Risk, IT Audit, Information Security, GRC, Cybersecurity Assurance, or Quality Assurance.\nStrong experience in reviewing third-party cybersecurity assessments, control assessments, workpapers, and assessment reports.\nExperience identifying gaps in evidence, documentation, control responses, and assessor commentary.\nStrong understanding of IT controls, cybersecurity controls, risk assessment, and control testing concepts.\nExperience with assessment intake, triage, workflow management, SLA tracking, and quality assurance.\nStrong analytical and attention-to-detail skills.\nExcellent written and verbal communication skills.\nAbility to work with multiple stakeholders and manage assessments through completion.\nExperience supporting internal/external audits and maintaining audit-ready documentation.\nTools & Platforms\nExperience with one or more of the following is preferred:\nJira - workflow and issue tracking\nCoupa - third-party/vendor management\nSharePoint - document and evidence management\nGRC / Third-Party Risk Management platforms\nMicrosoft Excel and reporting tools\nPreferred Qualifications\nExperience with Third-Party Risk Management (TPRM/3PCRM) processes.\nKnowledge of cybersecurity frameworks such as NIST CSF, ISO 27001, SOC 2, CIS Controls, or similar.\nExperience in vendor security assessments and cybersecurity questionnaires.\nCISA, CRISC, CISSP, ISO 27001, or relevant cybersecurity/risk certification is an advantage.\nExperience working in a regulated or enterprise environment is preferred.\n Key Competencies\nThird-Party Cyber Risk Management\nAssessment Intake & Triage\nCybersecurity Control Assessment\nQuality Assurance / Assessment QA\nControl & Evidence Review\nRisk-Based Decision Making\nWorkflow & SLA Management\nAudit Readiness\nStakeholder Management\nDocumentation & Reporting\nAttention to Detail\nProcess Improvement","description_format":"text","description_chars":5542,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Engineering Services","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-09T00:57:46Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.457,"p_room":0.55,"age_days":24,"expected_fill_days":20,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/cognizant-cyber-security-tprm-analyst","json_url":"https://alion.io/job/cognizant-cyber-security-tprm-analyst.json","meta":{"generated_at":"2026-10-24T10:18:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15053,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":85},"rest":"https://alion.io/mcp/rest/get_company?id=85"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcognizant-cyber-security-tprm-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcognizant-cyber-security-tprm-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcognizant-cyber-security-tprm-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cognizant-cyber-security-tprm-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcognizant-cyber-security-tprm-analyst"}]}