Senior Third Party Risk Analyst

Overview

Lead the day-to-day execution and continuous improvement of nVent's Third-Party Risk Management program, including risk methodologies, quantitative risk analysis, the enterprise cybersecurity risk register, governance documentation and automation.

What you'll do

• Lead day-to-day execution and continuous improvement of the Third-Party Risk Management program.
• Develop and refine third-party risk assessment methodologies aligned to cybersecurity, compliance, operational, and business risks.
• Partner with Procurement, Legal, Privacy, Compliance, and Information Security teams to integrate risk management activities into supplier onboarding and lifecycle processes.
• Establish metrics and reporting to measure supplier risk exposure and program effectiveness.
• Drive remediation and risk treatment activities with internal stakeholders and third-party suppliers.
• Mature risk scoring methodologies to support quantitative assessment of third-party risk.
• Develop standardized approaches for measuring and prioritizing risk across suppliers.
• Analyze risk trends and provide actionable insights to leadership.
• Support the development of business-focused risk reporting that enables informed decision-making.
• Maintain and continuously improve the cybersecurity risk register.
• Ensure risks are documented consistently with clearly defined risk owners, mitigation plans, and target remediation dates.
• Facilitate periodic risk reviews with business and cybersecurity stakeholders.
• Track risk treatment activities and provide status reporting to leadership.
• Create, maintain, and improve program procedures, workflows, and operating standards.
• Identify opportunities to simplify and standardize processes across risk management activities.
• Ensure documentation remains current and auditable.
• Champion the use of AI-enabled solutions to improve operational efficiency.
• Identify manual activities suitable for automation and implement scalable solutions.
• Collaborate with cybersecurity and business teams to introduce automation into risk assessment, reporting, and workflow management processes.
• Evaluate emerging technologies that can enhance TPRM effectiveness and user experience.

What you'll need

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or related field.
• 5+ years of experience in Third Party Risk Management, Cybersecurity Risk Management, Information Security, Audit, or Compliance.
• Experience using quantitative risk analysis methodologies in conducting supplier risk assessments and managing risk treatment.
• Experience developing or maintaining risk registers and risk reporting processes.
• Strong analytical, organizational, and stakeholder management skills.
• Experience with GRC platforms such as OneTrust, Archer, ServiceNow, or similar solutions.
• Experience leveraging AI, automation platforms or workflow orchestration technologies.

Details

• Location: Bangalore, India.