Job Description:
Role: Specialist Third Party Risk Management (TPRM)
About the Company:
Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risktaking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T you wont just imagine the futureyoull create it.
About the Job:
The ThirdParty Risk Management (TPRM) team is part of Chief Security Office (CSO) and is responsible for working closely with internal teams including IT Security Legal Compliance and Procurement to ensure a unified approach to thirdparty risk management. Below are the key responsibilities:
- Conduct Cybersecurity Assessments:
- Perform comprehensive security assessments of thirdparty vendors including evaluating their security policies controls and practices.
- Identify potential risks and vulnerabilities in vendor environments and provide recommendations for remediation.
- Risk Analysis and Reporting:
- Analyze assessment results to determine the level of risk associated with each thirdparty relationship.
- Prepare detailed assessment reports and risk summaries for internal stakeholders including senior management and the TPRM team.
- Vendor Onboarding and Monitoring:
- Assist in the onboarding process for new vendors by conducting initial security assessments and ensuring compliance with Supplier Information Security Requirements (SISR).
- Monitor and reassess existing vendors periodically to ensure ongoing compliance and address any emerging risks.
- Collaboration and Communication:
- Work closely with internal teams including IT Security Legal Compliance and Procurement to ensure a unified approach to thirdparty risk management.
- Communicate assessment findings and risk mitigation strategies to thirdparty vendors in a clear and constructive manner.
- Policy and Procedure Development:
- Contribute to the development and enhancement of TPRM policies procedures and guidelines.
- Stay up to date with industry best practices regulatory requirements and emerging threats to continuously improve the TPRM program.
- Training and Awareness:
- Provide training and awareness sessions to internal teams and thirdparty vendors on cybersecurity best practices and TPRM requirements.
Experience Level:5 years.
Location: Hyderabad / Bengaluru
Required skills:
- 4 years minimum experience in thirdparty risk management / risk consulting / cyber security assessments.
- Demonstrated experience in thirdparty risk management and vendor security assessments.
- Strong understanding of cybersecurity frameworks and standards (e.g. NIST ISO 27001 CIS Controls).
- Good understanding of various thirdparty risk management frameworks and standards.
- Proficiency in using security assessment tools and methodologies.
- Excellent analytical and problemsolving skills.
- Strong communication and interpersonal skills with the ability to convey complex security concepts to both technical and nontechnical audiences.
- Detailoriented with strong organizational and project management skills.
Desirable skills:
- Knowledge of data protection regulations (e.g. GDPR CCPA) and their impact on thirdparty risk management.
- Prior experience with Telecom sector.
- Relevant certifications such as CISSP CISM CRISC or CISA
Additional information (if any):Need to be flexible to provide coverage in US morning hours.
Weekly Hours:
40
Time Type:
Regular
Location:
IND:KA:Bengaluru / Innovator Building Itpb Whitefield Rd Adm: Intl Tech Park Innovator Bldg
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age color national origin citizenship status physical or mental disability race religion creed gender sex sexual orientation gender identity and/or expression genetic information marital status status with regard to public assistance veteran status or any other characteristic protected by federal state or local law. In addition AT&T will provide reasonable accommodations for qualified individuals with disabilities.AT&T is a fair chance employer and does not initiate a background check until an offer is made.
Required Experience:
Unclear Seniority