{"id":2772555,"url":"https://alion.io/job/ust-third-party-risk-management-tprm","title":"Third Party Risk Management (TPRM)","company":{"id":1774626,"name":"UST","domain":"ust.com","url":"https://alion.io/company/ust-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":75,"open_postings":138,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Finance","role_family":"Finance","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9000,"max_usd":25000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-19T17:14:54Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":55},"description":"We are looking for a detail-oriented and strategic Information Security - Risk Analyst to support the assessment, remediation, and continuous monitoring of cyber risks posed by external vendors, partners, and service providers. This role plays a critical part in the third-party risk lifecycle, with a primary focus on driving effective risk treatment plans, collaborating with internal stakeholders and vendors to remediate control gaps and reduce exposure in the supply chain. Key Responsibilities:\nAnalyze third-party security assessments to identify risk findings and determine appropriate treatment strategies (e.g., remediation, compensating controls, or acceptance).\nCollaborate with vendors, procurement, legal, and business stakeholders to document and manage risk treatment plans based on due diligence and ongoing monitoring results.\nTrack and follow up on risk remediation activities, ensuring that treatment plans are executed within agreed timelines.\nMaintain a centralized register of third-party risk treatment activities and ensure all documentation is audit-ready.\nRecommend and support the implementation of compensating controls or alternative mitigation actions when direct remediation is not feasible.\nEscalate high-risk third-party issues and delays in remediation to leadership.\nContribute to the enhancement of third-party risk management frameworks, processes, and tools, ensuring alignment with NIST CSF, ISO 27001, and regulatory requirements.\nProvide insights and reporting on risk trends, treatment status, and control effectiveness across the third-party portfolio.\nSupport audit, regulatory, and internal assurance activities related to third-party cybersecurity risk. Qualifications:\nBachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related discipline.\n3+ years of experience in IT or cybersecurity risk management, with specific experience in third-party or vendor risk.\nStrong knowledge of third-party risk management frameworks and control standards (e.g., NIST, ISO 27001, SIG, SOC 2, CSA).\nHands-on experience reviewing third-party security assessments, risk questionnaires, and due diligence documentation.\nFamiliarity with GRC or third-party risk platforms (e.g., Onspring, OneTrust, Archer, ServiceNow, Prevalent, BitSight, Panorays).\nExcellent communication and negotiation skills to work with internal and external stakeholders.\nIndustry certifications (e.g., CRISC, CTPRP, CISA, CISSP) are a plus.","description_format":"text","description_chars":2474,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T06:49:13Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.385,"p_room":0.36,"age_days":55,"expected_fill_days":30,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/ust-third-party-risk-management-tprm","json_url":"https://alion.io/job/ust-third-party-risk-management-tprm.json","meta":{"generated_at":"2026-10-19T17:51:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13644,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774626},"rest":"https://alion.io/mcp/rest/get_company?id=1774626"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fust-third-party-risk-management-tprm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fust-third-party-risk-management-tprm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fust-third-party-risk-management-tprm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ust-third-party-risk-management-tprm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fust-third-party-risk-management-tprm"}]}