Third Party Cyber Risk Services Operations - Lead Analyst

ServiceNow TPRM Sr.Solution Engineer (Offshore)

· Location- Remote

· Contract- 6 months

· Budget- 1.50 lpm

Job Description

Position Description: 

Templar Shield is seeking a highly skilled ServiceNow TPRM Sr. Solution Engineer to provide advisory and technical leadership for the design, optimization, implementation, and sustainment of ServiceNow Third-Party Risk Management solutions. This role translates business needs into practical platform capabilities, prioritizes out-of-box functionality, and delivers solutions aligned with Templar Shield and ServiceNow best practices. 

 ​

Requirements

Primary Objectives:

· Provide advisory support and implementation best practices for ServiceNow Third-Party Risk Management.

· Assess and optimize existing ServiceNow TPRM implementations, including processes, workflows, configurations, and operating practices.

· Review and refine third-party risk tiering, Inherent Risk Questionnaires (IRQ), Vendor Risk Assessments (VRA), and scoring methodologies to improve consistency and alignment with business needs.

· Define and recommend solution options for formally tracking risk mitigation activities in ServiceNow, considering applicable licensing constraints and other business, technical, and operational factors.

· Support the creation, review, and refinement of ServiceNow user stories, acceptance criteria, process designs, test plans, and implementation documentation using Agile/Scrum methods.

· Provide advisory and subject matter expert support for client-led development, testing, validation, defect management, user acceptance testing, rollout planning, and rollout execution.

· Prepare and support project-related documentation, solution demonstrations, and stakeholder presentations.

· Provide post-rollout hypercare, troubleshooting, and knowledge transfer for the TPRM solution in accordance with the applicable project plan or other written agreement.  

· Provide knowledge transfer and advisory support to client personnel for ongoing operation, administration, and sustainment of the TPRM program following project completion.  

· Design, configure, implement, and support TPRM workflows, assessments, notifications, reporting, dashboards, portals, integrations, approval paths, exceptions, and ongoing monitoring.  

· Develop and maintain integrations between ServiceNow TPRM and third-party tools using APIs and web services, including JSON, SOAP, and XML.  

· Create and maintain solution design specifications, configuration records, deployment notes, troubleshooting guidance, and technical knowledge articles. 

· Provide technical guidance and TPRM best practices to client teams; train and mentor junior consultants and administrators.  

· Collaborate effectively with distributed teams and manage assigned work in alignment with client expectations and delivery standards.

Qualifications: 

Core Experience:

· 5+ years of ServiceNow development or implementation experience, including at least 3 years focused on ServiceNow TPRM.

· Bachelor's degree from an accredited college or university, or equivalent relevant professional experience.

· Demonstrated ability to lead technical workstreams, facilitate client discussions, solve complex problems, and exercise independent judgment in a customer-focused consulting environment.

· Excellent written and verbal communication, analytical, documentation, troubleshooting, and teamwork skills.

Technical Skills:

· Strong hands-on knowledge of ServiceNow TPRM and relevant platform capabilities, including Flow Designer, UI Builder, business rules, notifications, UI pages, UI macros, formatters, database views, reporting, dashboards, and role-based security.

· Proficiency in ServiceNow scripting and development, including JavaScript, Glide API, web services, and application configuration; experience with HTML and CSS. Familiarity with React, AngularJS, or Java is beneficial.

· Ability to design TPRM data models, workflow automation, integrations, security roles, reports, and client-specific configurations while maintaining platform upgradeability.

· Knowledge of third-party risk assessment, compliance, control testing, issue management, remediation, internal audit, and continuous monitoring methodologies.

· Knowledge of common security and compliance frameworks, such as NIST SP 800-53, NIST SP 800-171, NIST CSF, ISO 27000 series, PCI DSS, CIS, and NERC CIP. Knowledge of ServiceNow Performance Analytics, ITSM, or ITOM is a plus.

Certifications:

· ServiceNow Certified System Administrator required. ServiceNow Certified Implementation Specialist in TPRM preferred.

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

Hiring: Technical Project Manager / Risk Business Analyst

Location: Bangalore / Mumbai

Experience: 8–10 Years

Employment Type: Full-Time

Job Description:

We are looking for an experienced Technical Project Manager / Risk Business Analyst to manage the ORS roadmap, backlog prioritization, project delivery, and risk-related business requirements. The role involves collaborating with business, risk, trading, and technology teams, managing dependencies, tracking KPIs, preparing business cases, and presenting updates to senior stakeholders.

Must-Have Skills:

• Project Management
• Risk Management
• Business Analysis
• JIRA / JIRA Cloud
• SQL
• Roadmap Planning

Good-to-Have Skills:

Front-to-Back Risk, FRTB, Stress Testing, ETL Tools, Excel, PowerPoint, Dataiku, Big Data, Data Analytics, and Data Governance.

 SOC analyst 

Location: Mumbai 

Experience: - 7 to 10 Years 

Band - 2B 

Role and Responsibilities: 

1. Develop, implement, and oversee the organization's comprehensive security strategy. 
2. Lead and mentor a team of security analysts to ensure high performance and professional growth. Act as a trusted advisor to executive leadership on security matters and emerging threats. 

• Threat Monitoring & Incident Response: 
• Oversee the detection and analysis of cybersecurity threats and vulnerabilities. 
• Manage the incident response process, ensuring timely identification, mitigation, and reporting of security incidents. 
• Collaborate with cross-functional teams to perform root cause analyses and implement corrective actions. 
• Risk Management & Compliance: 
• Conduct regular risk assessments and audits to ensure compliance with industry regulations and standards (e.g., ISO 27001, GDPR, SOC 2). 
• Implement and enforce policies, procedures, and controls to minimize risks and maintain compliance. 

1. Collaborate with legal and compliance teams to address security-related legal or regulatory requirements 

• Tools & Technology Management: 
• Evaluate, recommend, and implement security tools and technologies to strengthen defenses. 
• Oversee the configuration, maintenance, and monitoring of security infrastructure, including firewalls, SIEM systems, and endpoint protection tools. 
• Ensure the security of cloud platforms, networks, and on-premises systems. 
• Training & Awareness: 
• Develop and lead employee security awareness programs to promote a culture of security. 
• Stay current on emerging security trends and technologies to anticipate potential risks. 
• Vendor & Stakeholder Management: 
• Liaise with external vendors, consultants, and auditors to enhance security measures. 
• Build strong relationships with internal stakeholders to align security initiatives with business objectives. 

Job Summary

We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.

The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.

Key Responsibilities

• Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
• Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
• Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
• Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
• Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
• Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
• Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
• Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
• Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
• Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.

Required Skills & Experience

• 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
• Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
• Experience with one or more enterprise risk technology platforms, such as:
• RSA Archer
• ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
• Other enterprise GRC and risk management platforms
• Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
• Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
• Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
• Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
• Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
• Strong communication, problem-solving, strategic planning, and decision-making skills.

Preferred Qualifications

• Experience in banking, financial services, insurance, or other regulated industries.
• Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
• Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
• Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.

Key Competencies

• Enterprise GRC Technology Strategy
• Technology Delivery & Programme Leadership
• Risk Platform Implementation and Optimization
• Stakeholder & Vendor Management
• Process Automation and Digital Transformation
• AI/GenAI and Analytics Enablement
• Global Team Leadership
• Governance, Controls and Continuous Improvement

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com