Abhishek Acharya Email and Phone Number

I conducted assessments on multiple vendors, evaluating their risk profiles using third-party evaluation methods. I also helped establish processes for 4th and 5th party assessments as well as vendor acquisition and mergers. These evaluations were comprehensive, involving both remote and on-site assessments. Additionally, I communicated with vendors to discuss solutions for the issues identified during these assessments. I provided recommendations to help them address the findings within the agreed-upon timeframes.Furthermore, I played a key role in ensuring compliance with data localization, PSS audits, DC audit and data tokenization regulations for a major entity in the payment industry. I also worked on compliance with the Monetary Authority of Singapore (MAS). My focus was on securing Indian payment data and transactions, ensuring that they were stored exclusively within India.

In the field of Information Security, Governance, Risk, and Compliance (GRC):Ensured compliance with a wide range of legal, regulatory, and contractual obligations.* Stayed prepared and knowledgeable on various standards.* Led thorough internal and external audits in line with ISO 27001 and SOC2 standards.* Conducted detailed risk assessments for business units and support functions.* Performed gap analyses to assess the adequacy of existing controls in each business unit.* Developed gap assessments specifically for ISO 27001:2022, NISA, and RBI IT directives.For Third-Party Risk Management:* Verified vendor compliance with the organization's legal, regulatory, and contractual requirements.* Evaluated the controls implemented by service providers across various IT processes.* Assessed the effectiveness of the organization's established controls.