Dushinka Choudhary

Third Party Risk Management

• Working on Third Party Risk Management (TPRM) program process from onboarding vendors, conducting risk assessments, and ongoing monitoring of vendors to identify potential cybersecurity, compliance and operational risks.
• Evaluating the evidences provided by the vendors
• Collaborated with cross-functional teams including Legal, Procurement, and Information Security to evaluate vendor controls, ensure regulatory compliance.

Security Exceptions

• Handled various types of technical security exceptions. Actively worked and collaborated with the Business Information Security Officers [BISO], SOC team and Network team.
• Explored the Splunk environment as working and engaging with SOC.
• Collaborated with various departments and stakeholders across IT and Security teams to assess and approve temporary or permanent security exceptions.

Risk Management

• Created dashboards on Power BI and ServiceNow for tracking metrics associated with operational risks.
• Worked on Automation to improve the efficiency
• Worked on ERM [Enterprise Risk Management].
• Worked on the PenTest Issues.
• Added AI security and Governance to the ERM module.
• Documented and reported on key risks and recommended mitigation strategies.
• Maintained databases containing information about current and past risks.
• Reviewed internal processes for identifying, measuring, monitoring and reporting risks.