An experienced Risk Analyst with over five years of dedicated experience specializing in Vendor/Third Party Risk Assessment and Management, Internal Controls Testing, Business Continuity Assessment, and Security Questionnaire response. Adept at meticulously analyzing SOC reports and policies to pinpoint control gaps or findings. Proven track record in creating, managing, and closing issues, as well as drafting Executive Summaries post-risk assessment completion. Well-versed in security compliance and third-party frameworks and standards such as HIPAA, GDPR, NIST 80053 SP, PCI DSS, CCPA, ISO 27001, SSAE 18 SOC 1&2, ensuring the confidentiality, integrity, security, privacy, and availability of information systems. Experience leveraging on multiple GRC tools and Business intelligence tools such as RSA Archer, Process unity, ServiceNow, OneTrust, Logic Manger, BitSight, Tableau, Power BI, Alteryx, and AWS glue studio.