Devyani Patil Email & Phone Number

Managed evidence collection, documentationfor compliance with ISO 27701, ISO 27001, ISO27017, ISO 27018 and ISO 22301 standards aswell as Internal Audit for respective standards.Proficient in monitoring and reviewingemployee electronic communications,including archived emails and social mediaposts, ensuring adherence to regulatoryguidelines, such as ISO 27001 and SOC 2 TypeII.Close electronic communication with ourstackholders, vendors and organize the timely(weekly/monthly) overview calls with relevantMOM and plan of action.As single handeldly run the Internal Audit ofall ISO/IES standards used to worked with no.of teams and handle the external auditors.By handling the TPRM, VRM, RiskManagement, Risk Application and RFPsmaster in Vendor and Client managementand got the chance to be spoc to client.In Third-Party Risk Management (TPRM)developed and implemented TPRMframeworks to assess and mitigate risksassociated with external vendors. Conductedthorough risk assessments and due diligenceon potential third-party partners, ensuringcompliance with regulatory requirements.Collaborated with cross-functional teams toestablish risk tolerance levels and monitoringprocesses, enhancing the organization’s riskposture. Utilized quantitative and qualitativemetrics to track and report on third-party riskprofiles to senior management.In Vendor Risk Management (VRM) managedthe VRM lifecycle, from onboarding tocontinuous monitoring of vendor performanceand risk. Established and maintained vendorrisk assessment methodologies, includingscorecards and risk ratings. Facilitated vendoraudits and assessments, ensuring adherenceto contractual obligations and organizationalstandards. Developed training programs forinternal stakeholders on best practices invendor risk management, promoting a cultureof risk awareness.Responding any business request related toCompliance in an accurate, informative andtimely manner.Trained for Audit survillanceGive training to new joiners realred toInformation Security ethics as well as companycommunaction module.Used to prepare reports asked by L2 analyst.Integral team member in quarterly SOC 2audits, ensuring alignment with regulatoryrequirements.Supported maintenance of robust security andprivacy frameworks through meticulousevidence handling.As being part of 3 qurtely SOC 2 Type II audits,efficient in periodic reviews, KPI management,data handling, implimenting the policychanges and track the status and updation.