Vikas Vaid Email & Phone Number

Third-Party Risk Management, Global Issue Management & Application Risk Assessment TeamRoles and Responsibilities: (Third-Party Risk Management)1. This Role position will be responsible for setting up a Global Third-Party Risk Management Program within Blackstone IT Risk and Security Organization.2. Create a framework, Process, and SOP for the VRM Program keeping the Cybersecurity framework in mind.3. Conduct vendor risk assessments over third-party vendors, including but not limited to determining the scope of the service provided by interacting with Blackstone Senior Management4. Select and Implement tools for Vendor Risk Management Program5. Risk assessments are done directly to vendors using our online tool; responses are examined to determine the extent of risk the relationship represents to Blackstone; recommendations are offered to Blackstone Management on responding to any risks; and formal findings are generated.Roles and Responsibilities: (Global Risk Issue Management)1. Issue identification and documentation1. To determine the impact of each issue.2. To prioritize issues and report on their status.3. To review all the issues and determine the next course of action.4. Analysis of the root cause of issues5. Designing issue action plan and implementing resolutions6. Reporting about project issuesRoles and Responsibilities: (Application Risk Management)1. Conduct assessments to define and analyze possible risks2. Evaluate the gravity of each risk by considering its consequences3. Develop risk management controls and systems4. Design processes to eliminate or mitigate potential risks5. Evaluate existing policies and procedures to find weaknesses6. Prepare reports and present recommendations7. Help implement solutions and plans

Gurgaon, India

Vendor Risk Management (Third Party Risk Management) & Data PrivacyRoles and Responsibilities: (Vendor Risk Management)1. This Role position will be responsible for setting up a Global Third-Party Risk Management Program within Blackstone IT Risk and Security Organization.2. Create a framework, Process, and SOP for the VRM Program keeping the Cybersecurity framework in mind.3. Conduct vendor risk assessments over third-party vendors, including but not limited to determining the scope of the service provided by interacting with Blackstone Senior Management4. Select and Implement tools for Vendor Risk Management Program5. Risk assessments directly to vendors using our online tool; examining responses to determine the extent of risk the relationship represents to Blackstone; offering recommendations to Blackstone Management on how to respond to any risks; and generating formal findings.6. Assess and respond to risk findings, including pursuing action plans to completion and negotiating due dates with vendors7. Perform security assessments of systems, applications, data centers, and service providers using an established framework and tools to evaluate vulnerabilities. Research new and developing technologies and standards to help contribute to the continuous improvement of the risk assessment process8. Act as a subject matter expert in understanding why certain risks are a threat to the company and how compensating or mitigating processes affect that risk.Roles and Responsibilities (Data Privacy):1. This Role position will be responsible for setting up the Global Data Privacy Program within Blackstone.2. Create a framework, Process, and SOP for the Data Privacy Program.3. The Data Privacy Program includes 2 different Phases: Phase 1 (PIA & Record of Processing Activity (ROPA)) and 4. Phase 2- (DPIA & Data Subject Access Request (DSAR)).5. Select and Implement tools for the Data Privacy Program.

Gurgaon, Haryana, India

Vendor Risk Management (Third-party Risk Management) & Data PrivacyVendor Risk Management (Third Party Risk Management)Roles and Responsibilities: (Vendor Risk Management)1. This Role position will be responsible for setting up a Global Third-Party Risk Management Program within Blackstone IT Risk and Security Organization.2. Create a framework, Process, and SOP for the VRM Program keeping the Cybersecurity framework in mind.3. Conduct vendor risk assessments over third-party vendors, including but not limited to determining the scope of the service provided by interacting with Blackstone Senior Management4. Select and Implement tools for Vendor Risk Management Program5. Risk assessments directly to vendors using our online tool; examining responses to determine the extent of risk the relationship represents to Blackstone; offering recommendations to Blackstone Management on how to respond to any risks; and generating formal findings.6. Assess and respond to risk findings, including pursuing action plans to completion and negotiating due dates with vendors7. Perform security assessments of systems, applications, data centers, and service providers using an established framework and tools to evaluate vulnerabilities. Research new and developing technologies and standards to help contribute to the continuous improvement of the risk assessment processRoles and Responsibilities (Data Privacy):1. This Role position will be responsible for setting up the Global Data Privacy Program within Blackstone.2. Create a framework, Process, and SOP for the Data Privacy Program.3. The Data Privacy Program includes 2 different Phases: Phase 1 (PIA & Record of Processing Activity (ROPA)) and 4. Phase 2- (DPIA & Data Subject Access Request (DSAR)).5. Select and Implement tools for the Data Privacy Program.6. Implementing technical and organizational measures to safeguard sensitive data.

Noida Area, India

Global Risk and Compliance, Risk Management, Internal Audit, SOX, and Vendor Risk Management.1. As part of BD North Star Project Team is primarily responsible for driving the contractual requirement of the MSA signed between BD and HCL. HCL Compliance Team’s activities can be divided into the following segment2. Responsible for leading Life Science Risk and Compliance such as SOX, Privacy, and Information Security controls.3. Responsible for ensuring compliance and security-related Policies, processes, guidelines, and standards for compliance to the requirement as per client needs.4. Responsible for ensuring documentation of compliance and Risk security-related Policies, processes, guidelines, and standards for compliance with the requirement.5. Execute risk assessments on information assets, projects, and suppliers in line with the control framework;6. Collect and collate evidence of adherence to information security controls as part of the governance, risk, and compliance activities7. Perform additional tasks as requested by the VP of Compliance and Information Security.

Gurgaon, India

Third-Party Risk Management Lifecycle.Evaluate, and support the delivery of business solutions that align with The Organization’s information security policies, standards, and best practices.2. Responsibilities include Internal and External audits, Investigations (Security and Fraud), Risk Analysis, Root Cause Analysis and GAP Analysis, Site Audits, Risk Assessments and Vulnerability Assessments.3. Responsible for the continuous improvement, creation, maintenance, updating, and review of security documentation like policy(s) [according to the ISO 27001], procedure(s), guideline(s), RAG reports and Dashboards for the Compliance and Security Team, in consultation with various functional heads, thus monitoring compliance among employees, project leads, alliance, vendors and other third parties, and referring problems/troubleshooting measures/reports to the appropriate Project-Leads, Concerned Business heads, Compliance and Security Council and the Management4. Implement and execute, the security evaluation processes, and techniques and leverage security technologies as a risk management tool to help the business meet and exceed business objectives.5. Exercising highly focused due diligence over The Organization’s vendors regarding the state of their information security programs and technology used to safeguard the Organization’s Brand, and The Organization’s data/information.6. Building strong, trustworthy partnerships and value-added relationships with technology and business stakeholders.7. Providing security technology engineering design leadership to technology project teams as a cross-committed team member. This leadership will apply to the integration of new technologies, the maturing of existing technologies, and the retirement/de-coupling of obsolete technologies.8. Directing and recommending tactical security technology decisions including go/no-go decisions on security technology changes.

Gurgaon, India

Order management, PO creation, delivery, invoice, Accounts payable, Accounts receivable, Internal Audit and shipment1. Coordinate internal activities related to all outgoing shipments with NSN and other departments concerned and control the cycle of transportation.2. Provide details of outgoing shipments to all parties responsible for ensuring prompt delivery to customers/recipients.3. Responsible for end-to-end process of order handling and delivery execution in SAP.4. Monitor and evaluate all order issues and devise solutions.5. Coordinating and following up with the different global NSN Hubs for forecasting of goods availability.6. Coordinating with LSP (Logistics Service Provider) for AWB/BL/LR.7. Maintaining Shipment Records and Documents in a manner facilitating easy retriever.8. Review and Amendment of LC (Letter of Credit).9. Preparation of documents according to LC and UCP guidelines.10. Maintaining the order tracking MIS.11. Preparation of Movement Tracker and update day-to-day shipment status.12. Updating and Maintaining LC Track List.