KPMG is hiring for Analyst- TPRM | Apply Now

What you will do

• • Job Description

    The Information Security Vendor/Supplier/Third Party Manager is responsible for managing the security of all third party relationships. This includes assessing and mitigating risk, developing security requirements and guidelines, and overseeing the implementation of security controls. The Manager is also responsible for ensuring that appropriate and effective security measures are in place throughout the vendor/supplier/third party lifecycle.

  • Responsibilities:

    1. Develop a comprehensive third-party risk management program
    2. Manage vendor/supplier/third party due diligence process including risk assessment, contract negotiation, and ongoing monitoring
    3. Develop and maintain relationships with vendors/suppliers/third parties to ensure compliance with corporate information security policies and standards
    4. Establish requirements for third party access to corporate systems or data
    5. Identify gaps in existing controls and recommend improvements
    6. Monitor vendor/supplier/third party performance against established service level agreements (SLAs)
    7. Develop processes to respond to incidents involving vendors/suppliers/third parties
    8. Stay current on emerging threats, trends, best practices, industry standards, regulations, etc.