{"id":2148609,"url":"https://alion.io/job/cognizant-cybersecurity-tprm-assessor","title":"Cybersecurity- TPRM Assessor","company":{"id":85,"name":"Cognizant","domain":"cognizant.com","url":"https://alion.io/company/cognizant","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Cognizant Careers","truth_index":{"grade":"A","score":87,"open_postings":114,"ghost_share":0,"stale_share":0.728,"repost_share":0.018,"time_to_fill_p50_days":20,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":30000,"period":"year","method":"role_seniority_country_cell","sample_n":12},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:33:34Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-21T06:39:26Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"#Cyber Security Experts#\nJob Title: Third-Party Cybersecurity Risk Management (3PCRM) Assessor / SME\nExperience: 5 to 15 years\nLocation: Bangalore only {Re-location fine}\nFunction: Cybersecurity / Third-Party Risk Management\nRole Type: Individual Contributor\nRole Overview\nWe are looking for an experienced 3PCRM Assessor to perform third-party cybersecurity risk assessments, evaluate vendor security controls, review evidence, conduct SME interviews and walkthroughs, and prepare assessment findings and final reports. The role requires strong knowledge of cybersecurity controls, risk frameworks, and third-party security assessment methodologies.\nKey Responsibilities\nThird-Party Cybersecurity Assessments\nPerform end-to-end third-party cybersecurity assessments in accordance with established assessment methodology and risk requirements.\nConduct engagement and/or application-specific remote assessments based on defined scope.\nReview vendor security questionnaires, supporting documentation, policies, procedures, and evidence.\nCompare current Control Assessment (CA) vendor responses with previous assessments to identify and document changes in the vendor's control environment.\nIdentify control gaps, risk observations, and changes in the vendor's security posture.\nRequest and participate in assessment kickoff meetings and conduct follow-up discussions with vendors where required.\nConduct SME interviews, control walkthroughs, demonstrations, and evidence validation sessions.\nValidate the effectiveness and implementation of applicable cybersecurity controls.\nControl Mapping & Assessment Analysis\nMap vendor SOC 2 controls, SIG questionnaire responses, or equivalent third-party assurance artifacts to applicable company security questionnaires and control requirements.\nEvaluate whether existing third-party assurance reports and artifacts provide sufficient coverage of required controls.\nIdentify control areas requiring additional clarification, evidence, or testing.\nAssess the applicability and effectiveness of controls based on the vendor's environment, services, data access, and risk profile.\nFindings & Reporting\nIdentify and document initial assessment observations and potential control exceptions.\nWork with vendors and internal stakeholders to clarify assessment findings and obtain additional evidence where required.\nDetermine and document final Control Exceptions based on assessment results.\nPrepare clear, concise, and evidence-based assessment findings and recommendations.\nProduce final assessment letters, results, and supporting documentation.\nEnsure assessment records are complete, accurate, and audit-ready.\nStakeholder Management\nCollaborate with vendors, internal security teams, application owners, procurement, risk teams, and other stakeholders.\nCommunicate assessment requirements, observations, evidence gaps, and control exceptions effectively.\nConduct assessment follow-ups and manage outstanding actions through closure.\nSupport consistent application of the organization's third-party cybersecurity assessment methodology.\nRequired Skills & Experience\n5+ years of experience in Information Security, IT Audit, Cybersecurity Risk, GRC, or Third-Party Risk Management.\nProven experience conducting Third-Party Cybersecurity / TPRM assessments.\nStrong experience in:\nSecurity control assessments\nEvidence review and validation\nSME interviews and walkthroughs\nVendor risk assessments\nControl gap identification\nAssessment report writing\nExperience validating controls through walkthroughs, demonstrations, interviews, and supporting evidence.\nStrong understanding of cybersecurity controls and risk management practices.\nAbility to independently assess vendor security environments and determine control effectiveness.\nCybersecurity Domain Knowledge\nStrong understanding of the following areas:\n Identity & Access Management (IAM)\nPrivileged Access Management (PAM)\nVulnerability Management\nPatch Management\nCloud Security\nIncident Response & Management\nSecurity Operations\nSecurity Governance\nData Protection & Sensitive Data Handling\nProduction Support Controls\nChange Management\nBusiness Continuity / Disaster Recovery\nPhysical Security\nThird-Party / Vendor Risk Management\nFramework & Assurance Knowledge\nWorking knowledge of cybersecurity frameworks and assurance standards, including:\nNIST CSF\nISO/IEC 27001\nCIS Controls\n SOC 2\nSIG / SIG Lite or equivalent third-party security questionnaires\nIT General Controls (ITGC)\nRisk-based control assessment methodologies\nAssessment & Audit Capabilities\nAbility to perform onsite and remote assessments, where required.\nExperience validating controls through control walkthroughs, interviews, system demonstrations, and evidence inspection.\nAbility to distinguish between control design and operating effectiveness.\nStrong documentation and report-writing skills.\nAbility to translate technical control observations into clear business and risk language.\nStrong attention to detail and ability to challenge inadequate or incomplete evidence.\nPreferred Qualifications\nCISA, CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent certification.\nExperience with enterprise TPRM/GRC platforms.\nExperience assessing cloud service providers, SaaS vendors, technology vendors, and critical third parties.\nExperience working in regulated or highly controlled environments.\nKey Competencies\nThird-Party Cybersecurity Assessment\nCyber Risk Assessment\nControl Testing & Validation\nEvidence Review\nVendor/Supplier Risk Management\nSOC 2 & SIG Assessment\nControl Mapping\nIAM & Privileged Access\nCloud & Infrastructure Security\nRisk & Control Analysis\nFindings & Exception Management\nAssessment Report Writing\nStakeholder & Vendor Management\nStrong Analytical & Communication Skills\nThe candidates should be experienced on:\nSecurity Frameworks:Deep understanding of widely accepted information security frameworks, NIST Cybersecurity, HIPAA, PCI, Shared Assessments (SIG), etc\n\nCloud Security:Demonstrated understanding of cloud security.\nExperience evaluating cloud hosting environment\n\nRisk Management:Experience identifying, assessing, monitoring, and prioritizing Infosec risks across multiple domains\nExperience evaluating the effectiveness of supplier/third party managed cybersecurity requirements.\n\nVulnerability & Pen testing:Experience evaluating pen testing and vuln scanning methodologies.\nExperience interpreting the security testing results.\n\nRelevant Information Security/Risk Management Certifications (nice to have)CISM, CRISC, CISA, CISSP, CCSP, CCSK, CCSA","description_format":"text","description_chars":6571,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Engineering Services","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-09T05:00:47Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.507,"p_room":0.55,"age_days":21,"expected_fill_days":20,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/cognizant-cybersecurity-tprm-assessor","json_url":"https://alion.io/job/cognizant-cybersecurity-tprm-assessor.json","meta":{"generated_at":"2026-10-21T10:55:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15418,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":85},"rest":"https://alion.io/mcp/rest/get_company?id=85"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcognizant-cybersecurity-tprm-assessor"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcognizant-cybersecurity-tprm-assessor"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcognizant-cybersecurity-tprm-assessor"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cognizant-cybersecurity-tprm-assessor\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcognizant-cybersecurity-tprm-assessor"}]}