Associate - Third Party Security Risk Management

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?

About The Role

As a Third Party Security Risk Management – Associate, you will support the identification, assessment, monitoring, and mitigation of risks associated with third-party vendors and business partners. You will be a key member of the Third-Party Risk Management team, collaborating with Procurement, Legal, IT, Compliance, Security, and business stakeholders to ensure effective risk governance and regulatory compliance.

You will have the opportunity to contribute to risk assessment programs, support vendor onboarding activities, monitor third-party risk indicators, and help strengthen the organization's risk management framework while continuously developing your expertise in cybersecurity, compliance, and operational risk management.

In This Role, You Will

• Support the execution of third-party risk assessments across cybersecurity, compliance, financial, and operational risk domains.
• Assist with vendor onboarding and due diligence activities to ensure alignment with internal risk management policies and standards.
• Monitor third-party performance, track remediation activities, and prepare risk reports and dashboards for stakeholders.
• Collaborate with cross-functional teams to gather, validate, and maintain accurate third-party risk data and documentation.
• Contribute to continuous improvement initiatives, policy enhancements, audit support activities, and third-party risk awareness programs.

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, Business Administration, Information Technology, or a related discipline.
• 3-6 years of experience or foundational knowledge of third-party risk management, vendor risk management, cybersecurity risk, compliance, or operational risk practices.
• Understanding of risk assessment methodologies, vendor due diligence processes, and risk documentation requirements.
• Strong analytical, communication, and stakeholder management skills with the ability to work across multiple teams.
• Certifications such as ISO 27001, CISA, or ISO 42001, or a demonstrated willingness to pursue relevant industry certifications.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, and Own It.

• Knowledge of third-party risk management platforms and governance, risk, and compliance (GRC) tools.
• Familiarity with cybersecurity frameworks, regulatory requirements, and industry best practices.
• Experience supporting audits, remediation tracking, and risk reporting activities.
• Ability to interpret risk findings and communicate recommendations effectively to stakeholders.
• Continuous learning mindset with an interest in emerging security, compliance, and vendor risk trends.

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a Cognizant office in Chennai, Coimbatore, or Bangalore. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.