Third-Party Risk Management Manager

As a Third Party Risk Management Manager, you will lead the execution and continuous enhancement of the enterprise-wide third-party risk management program. You will be a key member of the risk management organization, collaborating with Procurement, Legal, Compliance, Cybersecurity, and business stakeholders to ensure third-party risks are effectively identified, assessed, monitored, and mitigated. You will have the autonomy to drive strategic initiatives, strengthen governance frameworks, optimize risk processes, and support executive decision-making while fostering a proactive risk-aware culture across the organization. In this role, you will: Lead the development, implementation, and execution of third-party risk management frameworks, policies, and procedures across the organization. Oversee third-party risk assessments, vendor due diligence activities, continuous monitoring programs, and remediation efforts across cybersecurity, compliance, financial, and operational risk domains. Partner with Procurement, Legal, Compliance, and business stakeholders to align vendor risk practices with organizational objectives and regulatory requirements. Present risk findings, mitigation strategies, program metrics, and governance updates to senior leadership and risk committees. Drive program maturity through process improvements, risk tiering initiatives, KPI development, audit support, automation opportunities, and team leadership. What you must have to be considered Bachelor’s degree in Information Security, Cybersecurity, Risk Management, Information Technology, Business Administration, or a related discipline. 9–12 years of experience in Third-Party Risk Management (TPRM), Vendor Risk Management, Information Security, Cybersecurity Risk, Compliance, Audit, or Enterprise Risk Management. Strong knowledge of third-party risk assessment methodologies, vendor due diligence processes, risk governance, and remediation management practices. Experience leading cross-functional initiatives and engaging with senior stakeholders to drive risk-based decision making. Professional certifications such as ISO 27001 and CISA. Proven experience managing audits, regulatory assessments, risk reporting, and governance activities. A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges. The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It. These will help you succeed Experience with third-party risk management platforms, governance, risk and compliance (GRC) solutions, and workflow automation tools. Knowledge of industry frameworks, regulatory standards, and emerging third-party risk management practices. Strong leadership, mentoring, stakeholder management, and executive communication skills. Experience establishing KPIs, dashboards, metrics, and reporting frameworks for risk programs. Ability to drive strategic initiatives such as vendor segmentation, risk tiering, process optimization, and automation of risk workflows. Continuous learning mindset with a focus on innovation, operational excellence, and risk program maturity. Work model Hybrid work with 3 days a week in Cognizant offices in Chennai, Coimbatore, or Bangalore.