Third Party Risk Manager

Your Journey at Crowe Starts Here: At Crowe, you can build a meaningful and rewarding career.

With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact.

We embrace you for who you are, care for your well-being, and nurture your career.

Everyone has equitable access to opportunities for career growth and leadership.

Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups.

That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services.

Join us at Crowe and embark on a career where you can help shape the future of our industry.

Job Description: What It Means to Be a Consultant at Crowe Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions.

As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn.

At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems.

In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes.

In management at Crowe, you play a pivotal role in leading teams, guiding project execution, and deepening client relationships.

You are expected to contribute to account planning, identify opportunities to add value, and ensure high-quality delivery.

As your responsibilities expand, you take on broader account ownership, balancing project leadership with growing involvement in client strategy and solution development.

Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.

Crowe is seeking an experienced Third Party Risk Manager to join our growing Cybersecurity and Risk Consulting team in India.

In this role, you will lead and deliver Third-Party Risk Management (TPRM) engagements for global clients, helping organizations identify, assess, and manage cybersecurity and operational risks across their vendor ecosystems.

You will work closely with clients, vendors, and cross-functional teams to execute risk assessments, strengthen third-party governance programs, and drive high-quality project delivery.

This is an excellent opportunity for a cybersecurity professional who enjoys working in a dynamic consulting environment while mentoring teams and building trusted client relationships.

Responsibilities Third-Party Risk Management & Client Delivery Lead Third-Party Risk Management (TPRM) and Vendor Risk Management (VRM) engagements for global clients.

Conduct cybersecurity risk assessments using Crowe methodologies and industry-recognized frameworks.

Evaluate vendor security controls, governance practices, and overall cybersecurity maturity.

Assess technical and compliance documentation, including: SOC 2 Type II reports Penetration Testing reports Vulnerability Assessment reports PCI DSS assessments Other independent assurance reports Support and enhance cybersecurity programs aligned with the NIST Risk Management Framework (RMF), Assessment & Authorization (A&A), and related governance processes.

Develop vendor risk profiles and assess country, regulatory, and outsourcing risks.

Prepare high-quality assessment reports, executive summaries, and client deliverables.

Manage multiple client engagements, ensuring projects are delivered on time, within scope, and in accordance with Crowe's quality standards.

Provide regular project updates and effectively manage client expectations throughout the engagement lifecycle.

Build strong relationships with clients, vendors, and internal stakeholders while serving as a trusted advisor.

Identify opportunities to improve methodologies, operational efficiency, and service delivery.

Leadership & Team Development Lead, coach, and mentor team members, fostering collaboration and professional growth.

Promote a culture of quality, integrity, and continuous improvement.

Participate in organizational initiatives, knowledge sharing, and capability development.

Support the development and implementation of new methodologies, tools, and best practices.

Basic Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline. 7+ years of experience in Information Security, Cybersecurity Risk Management, Third-Party Risk Management, or Vendor Risk Management.

Experience leading teams of four or more professionals.

Strong experience conducting cybersecurity and third-party risk assessments.

Hands-on experience reviewing security assurance reports such as SOC 2, penetration testing, vulnerability assessment, and PCI DSS reports.

Strong knowledge of cybersecurity frameworks and standards, including ISO 27001, NIST, PCI DSS, ISO 22301, and privacy frameworks.

Solid understanding of: Network Security Cloud Security Application Security IT General Controls Data Privacy Cryptography Business Continuity and Disaster Recovery Incident Management Experience with vendor risk profiling, outsourcing risks, and regulatory requirements.

Excellent analytical, problem-solving, written, and verbal communication skills.

Strong auditing and stakeholder management capabilities.

Ability to manage multiple priorities and deliver high-quality work in a fast-paced consulting environment.

Willingness to travel as required.

Preferred Qualifications Experience conducting onsite vendor security audits.

Professional certifications such as: CISA CISSP CISM CCSP ISO 27001 Lead Auditor CTPRA Cloud platform certifications (AWS, Azure, or Google Cloud) Knowledge of governance, risk, compliance (GRC), and privacy regulations.

Familiarity w