About Cognizant Corporate
Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.
At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?
About the role
As a Third-Party Security Risk Management – Senior Associate, you will lead the assessment, monitoring, and governance of third-party security and operational risks across the vendor lifecycle. You will be a key member of the Third-Party Security Risk Management team, collaborating with Procurement, Legal, IT, Security, Compliance, and business stakeholders to ensure vendor risks are effectively identified, evaluated, and managed.
You will have the autonomy to drive risk assessments, support governance decisions, mentor junior team members, and contribute to process improvements and automation initiatives while helping strengthen the organization’s third-party risk management framework.
In this role, you will:
- Lead and execute third-party security risk assessments including onboarding reviews, reassessments, and continuous monitoring activities across cybersecurity, compliance, and operational risk domains.
- Perform detailed reviews of vendor questionnaires, supporting evidence, and assessment documentation to validate security controls and risk posture.
- Analyze assessment findings, prepare risk reports, and maintain risk registers using ServiceNow (SNOW) or equivalent governance and risk management platforms.
- Drive remediation management by tracking identified risks, coordinating with stakeholders, and ensuring timely closure of corrective actions.
- Collaborate with cross-functional teams including Procurement, Legal, IT, and Business Units to support risk evaluations, governance requirements, and compliance objectives.
What you must have to be considered
- Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, Business Administration, or a related discipline.
- 6-9 years of proven experience in Third-Party Security Risk Management (TPSRM), Vendor Risk Management, Information Security, Cybersecurity Risk, Compliance, or Operational Risk Management.
- Strong understanding of security frameworks, risk assessment methodologies, control evaluation techniques, and vendor due diligence processes.
- Experience analyzing vendor security documentation, assessment evidence, and risk findings while preparing executive-level reports and recommendations.
- Professional certifications such as ISO 27001, CISA, CISM, and/or ISO 42001.
- A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
- The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.
These will help you succeed
- Hands-on experience with ServiceNow (SNOW), Governance Risk and Compliance (GRC) tools, or third-party risk management platforms.
- Knowledge of industry regulations and frameworks including ISO 27001, NIST, DORA, and related security standards.
- Experience supporting risk governance forums, exception management processes, and risk acceptance workflows.
- Strong stakeholder management, communication, and presentation skills with the ability to engage senior leadership.
- Experience mentoring junior analysts and driving quality improvements within assessment and remediation processes.
- Exposure to automation initiatives, workflow optimization, AI-enabled risk assessment capabilities, and audit readiness activities.
Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a Cognizant office in Chennai, Coimbatore, or Bangalore. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] for roles based in the Americas or [email protected] for roles based in India.
