Cybersecurity GRC & Third-Party Risk Consultant

Covenant HR · India

Company - Our client is a leading cybersecurity consulting and solutions provider trusted by thousands of organizations, including major enterprises and government agencies, to strengthen security and reduce risk. The organization has earned extensive industry recognition for its cybersecurity expertise and workplace culture.

Job Title - Cybersecurity GRC & Third-Party Risk Consultant

Location - Remote — India or Philippines

Role Type - Contract position; length TBD

Must Have Skills:

• Hands-on Third-Party Risk Management (TPRM) experience conducting vendor security risk assessments, including reviewing security questionnaires and supporting documentation.
• 3–7+ years of cybersecurity GRC experience, with demonstrated ability to identify, document, and track remediation of cybersecurity risks.
• Experience with GRC platforms; OneTrust experience is strongly preferred, including administration and/or assessment experience.
• Experience with Identity Governance and Access Certification processes; familiarity with Okta Identity Governance is strongly preferred.
• Strong technical aptitude with an understanding of application architecture, integrations, and data flows, along with the ability to communicate risks and recommendations to both technical and non-technical stakeholders.

Responsibilities and Job Details:

• Conduct third-party/vendor cybersecurity risk assessments and support broader cybersecurity risk management initiatives.
• Review vendor security questionnaires and supporting evidence to identify and document potential cybersecurity risks.
• Evaluate architecture diagrams, data flow diagrams, compliance documentation, and other technical materials as part of security assessments.
• Identify security gaps and risks and track associated remediation activities through completion.
• Support Governance, Risk & Compliance (GRC), Third-Party Risk Management (TPRM), and Identity Governance initiatives.
• Assist application owners and managers with onboarding applications into Okta Identity Governance access certification campaigns.
• Support access certification and identity governance processes across enterprise applications.
• Leverage GRC tooling, including OneTrust where applicable, to manage assessments and risk-related activities.
• Assess application architecture, system integrations, and data flows to understand security implications and communicate actionable recommendations.
• Collaborate cross-functionally with Security, IAM, Privacy, Compliance, Architecture, and Business teams.
• Clearly communicate cybersecurity risks, findings, and remediation recommendations to both technical and non-technical stakeholders.