• Conducted in-depth risk-based security assessments of housed, Cloud, vendor, and third-party hosted environments. The assessment focus included Risk Management, Physical Security, Identity & Access Management, Encryption, Data Loss Prevention, Secure Development, Incident Management, Security Infrastructure, and Security Policy.• Utilized the standard information Gathering (SIG) by shared assessment questionnaire to assess the operational capabilities of third parties.• Provided transition, Ongoing Monitoring & Oversight of on-boarded engagements, including Intelligence source, Periodic Risk Reassessments, Business, and Onsite Reviews.• Delivered formal reports detailing key third-party risks identified, escalate control gap findings as necessary to management, presented reports, and make recommendations to key technology and business process stakeholders to promote awareness and determine mitigating control or remediation requirements.• Ensured that risks discovered during vendors’ assessment are remediated within a reasonable/ actionable timeframe; documented evidence to closed findings.• Facilitated remediation for any third-party-related operational issues as needed.• Acted as a remediation analyst, working with vendors to remediate findings discovered during the onsite/virtual assessment.• Used SNOW to ensure secure and prompt communication of findings and deployments of questionnaires to the vendor and to track vendor progress on remediation.