Aaftab Khan Email and Phone Number

More than 7 years and 9 months of experience, with 5+ years of experience in third party risk management, third party assessment execution and risk consulting focusing on Information Security and Third-Party Risk management solutions. Performed Third Party Risk Management Consulting, including framing Third Party IRQ (Inherent Risk Questionnaire) and RRQ (Residual Risk Questionnaire) for various clients. Worked on multiple Third-Party Risk Management (TPRM) projects which involved assessing the clients third party information security posture. Conducted third party audits, IT audits and assessments, process reviews, and implementation of remediation for the gaps that were identified during the process. Conducted both remote and onsite third-party assessments, IT risk assessments, and process reviews. Worked on projects to transform the clients’ existing due diligence process which included re-designing a new questionnaire based on client’s existing control standards for each risk domain. Re-designed the due diligence questionnaire for risk domains such as (Fraud, Information Security, Financial, Geo-political, Legal & Compliance, Operational, Privacy, Reputational, Business Continuity and Subcontractor). Assisted in designing a Service Catalogue based on the existing risk taxonomy and proposed new taxonomy of the client. The project also involved designing a third-party risk control framework which incorporates all the major global regulatory requirements related to third party risk. This included re-designing of the Inherent Risk Questionnaire to identify areas for improvement in the current inherent risk and residual risk questionnaires and creation of guidance documents.