Augustine A. Email & Phone Number

United States

Chicago, Illinois, Us

Collaborate with different teams and prospective third parties during vendor onboarding activities.Review vendor intake forms and use cases to ensure appropriate Tier to drive security assessments.Complete inherent risk categorization of all newly submitted third parties’ vendors.Lead security assessments for all third-party/service providersReview vendor security questionnaires (SIG) and supporting evidence to evaluate vendor security posture,Work with vendor relationship manager to resolve vendor related issues especially on non-responsive vendors and vendors” refusal to Provide evidence for assessment. Review SOC2 Type2, scans results, Penetration tests results, policies in order to identify vulnerabilities and gaps in vendors environments.Identify and evaluate vendor's risks findings, request mitigation summary of all Critical and High severity findings, track Risk treatment plans, and make recommendations.Good mastery in reviewing independent auditor reports like SOC1, SOC2, HITRUST and PCI DSS to ensure reports are in scope and valid.Communicate vendor security issues to stakeholders, ensuring good understanding of associated risks and actions needed.Engage with Legal team during review of vendors contracts to ensure Security concerns are addressed.Document and assign all identified risk to specified risk owners and update risk register on remediation status.Review and maintain policies and procedures to make sure it aligns with organization standards.Assist in reviewing internal security controls to ensure organizations meet and maintain compliances.Analyzed vendor evidence such as SOC, Vulnerability Scans and Penetration Test reports to identify gaps.Planned and executed onsite/virtual risk assessments for third party vendors focusing on compliance with regulations, policies, and internal controls.Monitored, and tracked TPRM lifecycle activities (identify, due diligence, risk assessment contract negotiation and Termination.

New York, New York, Us

 Work on specific risk-related projects as directed by management. Conduct risk assessments to help identify and describe the operational, reputational, financial, and compliance risks. Evaluate, assess, and quantify the potential impact of risks to SEI’s businesses. Report risks in the manner appropriate for each target audience, highlighting the relevant likelihood and severity of each risk. Assist in determining the most appropriate response to identified risks (avoid, share, reduce, accept). Understand SEI’s Corporate “risk appetite” (i.e., the level of risk SEI is prepared to accept) and work in a manner that supports adherence to it. Keep abreast of business and technology trends, particularly in the areas of business resilience, third party risk, cybersecurity, information governance, and identity management. Assists the Third-Party Risk Program Manager/Officers to implement and educate on the policies, standards, guidelines, tools, models, systems, and procedures required to support the Program. Coordinates with the Third-Party Program Manager/Officers to maintain the third-party inventory, risk assessment information, contracts, action plans, watch list, service level agreements, issues, and required documents within the GRC system, SharePoint, and document management system