Governance:• Coordinated audit scopes and facilitated meetings between auditors and various business and support units.• Map controls across different frameworks to identify commonalities and gaps.Risk Management: • Conduct risk assessments, gap analyses, and control reviews to identify deficiencies and improvements.• Led and supported the remediation of control issues, contributing to action plan development.• Lead KPMG’s vendor management program and conduct review on vendor audit evidence, documents and firm’s draft reportsCompliance:• Facilitate and lead various audit activities (i.e Internal audit, SOC2 type 2 audit, PCI-DSS and ISO 27001)• Lead the annual SOC2 audit process, including staying on top of timelines and tasks, maintaining the central repository for audit evidence, and communicating with external auditors

Risk Management: • Conducted in-depth risk assessments, identifying critical vulnerabilities and implementing controls that improved the security posture.• Lead third-party risk management (TPRM) and fourth-party risk management (FPRM) programs to assess and manage risks associated with vendors and partners.Compliance:• Spearheaded the implementation of PCI-DSS compliance initiatives, achieving full compliance across all business units• Manage the firm’s ISO27001 certification activities, ensuring ongoing compliance with the annex and clauses• Respond to security assessments, questionnaires, and audits from third-party business partners promptly.