Senior Associate, Third-Party Risk Management

Huron

. Enhance Huron’s vendor risk management practices while maintaining industry standards .

Posted 11/10/2026full-timeBangalore • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in third-party risk management and vendor security assessment, with a strong focus on compliance with industry standards such as SOC 2, ISO 27001, and NIST. Capable of effectively communicating technical findings to non-technical stakeholders while managing multiple vendor reviews and maintaining accurate documentation.

Highest-signal resume keywords

Third-Party Risk ManagementVendor Security AssessmentSOC 2 ComplianceGRC Platforms ExperienceStrong Written Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vendor Risk ManagementSecurity FrameworksRisk AssessmentData Privacy ComplianceAnalytical Problem-Solving

Soft Skills

Excellent Organizational SkillsCustomer-Oriented Approach

Tools & Technologies

ServiceNowOneTrustArcherProcessUnitySmartsheetMS ProjectSharePoint

Certifications & Qualifications

CTPRPCISACRISC

Industry Keywords

Vendor Risk StandardsSecurity Due DiligenceAudit-Ready DocumentationProcurement CollaborationRisk Posture Reporting

Tech Stack

Tools & technologies

ServiceNow

About the role

Key responsibilities & impact

Enhance Huron’s vendor risk management practices while maintaining industry standards
Conduct security reviews of prospective and existing vendors against Huron’s third-party risk standards
Assess vendor responses and supporting evidence to identify gaps, inconsistencies, and elevated risk
Recommend risk ratings and escalate higher-risk vendors or unresolved gaps to security leadership
Support event-driven and time-based reassessments of existing vendors
Administer security questionnaires according to vendor risk tier and involved data or systems
Collect, organize, and validate SOC 2 reports, certifications, policies, and other supporting evidence
Follow up with vendor contacts to close information gaps and keep reviews on schedule
Maintain questionnaire templates and evidence standards
Track remediation items, owners, due dates, and status through closure
Maintain the third-party risk register and supporting records in an accurate, audit-ready state
Produce reporting on vendor review status, open remediation items, and overall third-party risk posture
Partner with Procurement throughout vendor onboarding and complete security due diligence before contracts are finalized
Provide security input into procurement decisions and support security and data protection contract language reviews with Legal
Maintain a consistent intake process for new vendor engagements

Requirements

What you’ll need

3-5+ years of experience in third-party risk management, vendor security assessment, GRC, or a related security or compliance role
Undergraduate degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline
Working knowledge of common security frameworks and evidence types, including SOC 2, ISO 27001, and NIST, as applied to vendor assessment
Strong written communication skills, with the ability to summarize technical findings for a non-technical audience
Excellent organizational skills, with the ability to manage a high volume of concurrent vendor reviews and track detail accurately
Customer-oriented approach, comfortable working directly with vendors and internal stakeholders across Procurement, Legal, and the business
Experience with third-party risk management or GRC platforms such as ServiceNow, OneTrust, Archer, or ProcessUnity
Security certifications such as CTPRP, CISA, CRISC, or similar preferred
Familiarity with data privacy and regulatory requirements relevant to vendor relationships
Experience with Smartsheet, MS Project, SharePoint, or similar tools for tracking and reporting
Analytical problem-solving skills, including the ability to synthesize risk data into a format that supports decision-making

Benefits

Comp & perks

Hybrid work arrangement
Opportunities to support transformative client and community outcomes
Collaborative corporate team environment
Professional development through work with Procurement, Legal, security leadership, and business stakeholders