Benjamin Ametsohu Email & Phone Number

New York, United States

• Collaborate with cross-functional teams to manage third-party risk assessments, ensuring compliance with industry regulations such as HIPAA, PCI-DSS, and SOC.• Conduct comprehensive vendor assessments to identify and mitigate security risks, including security controls, policies, and procedures.• Develop and maintain vendor risk management frameworks (RMF) to identify, assess, and mitigate potential risks.• Conduct risk analysis and develop risk mitigation strategies to minimize exposure to security threats.• Ensure compliance with regulatory requirements and provide guidance to business units on security best practices.• Collaborate with internal audit teams to review and validate third-party compliance with policies and procedures.• Manage relationships with third-party vendors, including ongoing monitoring and assessments of vendor security posture.• Communicate effectively with stakeholders to provide updates on vendor risk assessment status, risk mitigation strategies, and compliance with regulatory requirements.

• Conduct vulnerability scans using Nessus, Qualys, and OpenVAS on a regular basis to identify vulnerabilities in the network and systems.• Analyze and prioritize vulnerabilities based on their risk levels and collaborate with the IT team to remediate them in a timely manner.• Conduct penetration testing using Metasploit and Nmap to identify potential security threats and recommend remedial actions to mitigate them.• Create vulnerability management policies and procedures based on NIST, PCI DSS, and ISO 27001 standards.• Collaborate with the security operations team to ensure that security logs are properly analyzed, and potential security incidents are identified and mitigated.• Conduct security awareness training for employees to help them identify and report potential security threats.