🚨 Hiring | TPRM – Information Security | Bangalore | Hybrid
🏢 Company: FutureSoft India
💼 Position: TPRM – Information Security
📍 Location: Bangalore, Karnataka
⏳ Experience: 2–3 Years of Relevant Experience
🏢 Work Mode: Hybrid
⏰ Shift Timings: 11 AM–8 PM or 2 PM–11 PM
🔄 Shift Flexibility: Required
🚀 Joining: Immediate
💰 Budget: Based on Experience
🎓 Education: Bachelor's Degree in Information Security (Mandatory)
📄 Job Description
FutureSoft India is looking for a qualified professional for the position of TPRM – Information Security in Bangalore. Candidates with 2–3 years of relevant experience in third-party risk management, information security, and IT risk assessment are encouraged to apply.
The role focuses on evaluating third-party and vendor risks from an information security perspective. The selected candidate will review vendor questionnaires, due diligence documents, SOC reports, and PCI reports to assess compliance with security standards and controls.
The position also requires preparing vendor assessment reports and executive summaries, communicating risk findings clearly, and coordinating with clients and vendors to resolve queries. Candidates must be comfortable working in a hybrid environment and flexible with the specified shift timings.
🛠️ Key Responsibilities
- Third-Party Risk Assessment: Conduct third-party and vendor risk assessments from an information security perspective.
- Vendor Due Diligence: Review vendor questionnaires, security documentation, and due diligence submissions.
- Report Assessment: Review SOC 1, SOC 2, and PCI-related reports and identify relevant security risks and control gaps.
- Security Compliance: Assess vendor compliance with applicable security standards, frameworks, and controls.
- Risk Reporting: Prepare vendor assessment reports and executive summaries that communicate key findings and risks.
- Stakeholder Coordination: Coordinate with clients and vendors to clarify information, resolve queries, and obtain required documentation.
- Risk Communication: Present risk findings clearly and explain their potential business and security implications.
- Assessment Documentation: Maintain clear and accurate records of vendor assessments, findings, and supporting evidence.
🎓 Mandatory Eligibility Criteria
- 2–3 years of relevant professional experience.
- Mandatory: Bachelor's degree in Information Security.
- Knowledge of ISO 27001 and NIST security frameworks.
- Understanding of SOC 1, SOC 2, and PCI report concepts.
- Knowledge of information security, IT risk, and security controls.
- Strong executive summary writing and risk communication skills.
- Good presentation, negotiation, and conflict management abilities.
- Strong verbal and written communication skills.
- Ability to join immediately.
- Flexibility to work either the 11 AM–8 PM or 2 PM–11 PM shift.
- Ability to work in a hybrid setup in Bangalore.
⭐ Mandatory Skills Required
- Third-Party Risk Management (TPRM)
- Information Security and IT Risk
- ISO 27001
- NIST Security Frameworks
- SOC 1 and SOC 2 Concepts
- PCI Report Review
- Vendor Security Assessments
- Security Controls and Compliance Assessment
- Executive Summary Writing
- Risk Storytelling and Presentation
- Negotiation and Conflict Management
- Verbal and Written Communication
Preferred Advantage: Relevant information security or risk management certifications are an added advantage.
🌟 Role Highlights
- Opportunity to work in third-party risk management and information security.
- Hybrid work arrangement in Bangalore.
- Experience requirement of 2–3 years.
- Immediate joiners preferred.
- Flexible shift options: 11 AM–8 PM or 2 PM–11 PM.
- Compensation budget based on experience.
- Relevant certifications provide an added advantage.
🧠 Interview Preparation Tips
- Review the purpose and key requirements of ISO 27001 and NIST security frameworks.
- Understand the differences between SOC 1 and SOC 2 reports and their relevance to vendor risk assessments.
- Revise the basics of PCI-related compliance and security control assessment.
- Prepare to explain how you review vendor questionnaires and identify information security risks.
- Practice writing concise executive summaries that communicate findings, risk impact, and recommended actions.
- Prepare examples of coordinating with vendors or clients to resolve assessment queries.
- Be ready to explain how you communicate technical security risks to non-technical stakeholders.
- Confirm your availability for immediate joining and flexibility across both shift options.
📩 How to Apply
Interested candidates who meet the mandatory educational and technical requirements can share their updated CV with the recruitment team.
📧 Email: VandanaS@futuresoftindia.com
Applicants should mention TPRM – Information Security – Bangalore in the email subject line and highlight their experience in vendor risk assessments, ISO 27001, NIST, SOC reports, and IT risk management.
📌 Job Summary
- Company: FutureSoft India
- Position: TPRM – Information Security
- Location: Bangalore, Karnataka
- Experience: 2–3 Years
- Work Mode: Hybrid
- Shift: 11 AM–8 PM or 2 PM–11 PM; flexibility required
- Joining: Immediate
- Education: Bachelor's degree in Information Security (mandatory)
- Budget: Based on experience
- Application Email: VandanaS@futuresoftindia.com