Kenneth Drah Email & Phone Number

United States

• Ensure all new vendor engagements that involve the vendor handling, processing, storing, or accessing sensitive information are reviewed to provide assurance the vendor has appropriate controls in place to protect.
• Perform periodic reviews of all existing active vendor engagements.
• Ensure accurate vendor risk ratings are completed, validated and all required vendor artifacts and documentation is collected appropriately.
• Maintain a vendor repository for all vendor engagements that handle, process, store, or access sensitive information.
• Recommend systems and process enhancements to reduce processing times and improve accuracy.
• Provides oversight of compliance, audit and regulatory reviews and acts as the primary point of contact for management, responsible for providing regulatory and information security expertise.

United States

• Performed risk assessments by analyzing questionnaires such as third-party engagement and due diligence evaluations.
• Maintained Third Party Inventory working with required stakeholders (e.g., Legal/Compliance, Procurement, IT, Business Owners) to maintain TPRM related data at entity level.
• Developed and maintain an active third-party assessment program to validate compliance against applicable security/privacy regulations or guidelines
• Reviewed SOC1, SOC2, ISO and other industry standard reports from third party vendors
• Ensured vendor compliance and track remediation status
• Prepared customized third-party assessment questionnaires & help maintain current compliance documents.