Sama W Email & Phone Number

Accomplished Vendor Risk Analyst with a proven track record in optimizing third-party risk management and compliance processes. Excel in managing customer questionnaires with a notably high on-time response rate, leveraging product knowledge and coordinating with experts to enhance database accuracy. Skilled in conducting comprehensive risk assessments, streamlining evidence retrieval, and maintaining strong adherence to corporate and regulatory standards. Known for facilitating effective vendor approval meetings and acting as a trusted contact during external audits. Possess a keen eye for process improvement, as evidenced by the significant enhancement of efficiency in evidence management and questionnaire response. Classified vendors based on business criticality and data sensitivity, conducting document review and questionnaire analysis. Tailored SIG questionnaires accordingly, and reviewed Core responses with artifacts, policies, and certifications. Evaluated evidence for accuracy and validity, analyzed scan findings, SOC 1, and SOC 2 reports to pinpoint control implementation and operational gaps. Conducted risk and control assessments for high-risk third-party providers, generated assessment reports, and maintained a mitigation-focused risk register. Coordinated with vendors to remediate identified vulnerabilities, closely monitoring risk posture and performance to maintain adherence to service level agreements. Assisted the internal audit team in compiling and preparing PBC evidence, ensuring artifacts were sanitized before external audit presentations.● Enhanced vendor risk management by implementing KPIs and utilizing Vendor INSIGHT, achieving a 90% rate in remediation of identified vulnerabilities.● Reduced phishing susceptibility by 35% through the design and execution of quarterly phishing campaign emails and subsequent training for affected employees using KnowBe4.● Achieved a 95% completion rate in security awareness training across multiple teams, fostering a culture of security mindfulness and compliance.● Crafted robust policies and procedures to enhance organizational security awareness and promote vigilant practices.● Enhanced procurement due diligence by refining and validating RFPs and streamlining accurate inherent risk questionnaires (IRQ).