Enterprise Risk and Third Party Risk Management (ISO/ IEC 27001 Lead Auditor)
Ghaziabad
Summary
To secure a challenging position where efficiencies and exposure to various functions would be able to contribute mutually to the betterment of a business and self.
Overview
13
13
years of professional experience
5
5
years of post-secondary education
1
1
Certification
Work History
Manager/ Assistant Director (Enterprise Risk & Third-Party Risk Management)
Ernst & Young GDS LLP (EY)
11.2021 - Current
Participate and lead Audits engagements for various clients with an overall business of $10M+
Helping Clients with Risk Control Self-Assessments, Control testing, Issue Management processes to meet compliance requirements
Supporting Clients with setting up their Third-Party Risk Management processes which includes, Inherent Risk Assessments (IRA), Third Party Audit Assessments, and Issue Management
Conducting Supplier Onsite/ Offsite reviews to assess their controls against the key risks associated with 3rd party engagements
Develop and implement procedures for issue remediation for the identified gaps
Drive-in business development initiatives along with client management and account management
Build connects with client stakeholders, understand their business challenges/pain areas and work with leadership to propose innovative solutions.
Procurement Enablement Professional (TPRCC)
British Telecom (BT)
12.2019 - 10.2021
Third party Risk Control Centre (TPRCC) - responsible to manage Third Party Risk at BT, performing various supplier risk assurance activities including control testing, issue remediation etc
Assuring 8 risk Domains - Financial insolvency, Data Privacy, Information Security, Health & Safety, Human Rights, ACB, BCM & Supplier Geographical Location
Monitoring Adverse Media, Supplier Assessments & Data Feeds (Bit Sight, D&B, Dow Jones etc.)
Managing Deloitte (Supplier)/Aravo (supporting Tool) in strategic and operational implementation of assurance activities including managing, planning, enhancement & overseeing the implementation of corrective actions
COVID Impact Assessment to gauge possible impact by assessing Supplier resilience to the situation across Tier 1 and Tier 2 suppliers
Modern Slavery Project - Assessed and guide suppliers by performing assessments ensuring ethical practices are adopted including environmental standards followed, workers code of conduct including safety and wellbeing
In addition, a special review on the China Forced Labor Issue related to Uyghur Community was performed
Assistant Manager (Risk & Controls)
Barclays Global Service Centre Pvt. Ltd. (BGSC)
03.2011 - 12.2019
Responsible for executing annual Risk and Control Self-Assessment (RCSA) refresh activity
Responsible for executing Controls Testing (DEA and OET reviews) for the identified material and non-material risks
Reviewing Internal Operational team and 3rd party risks on engagement to assess their control environment, discuss with Subject matter Experts, Supplier Legal Counsels and Account Directors
Review & remediate the Control gaps highlighted during the Control testing, Pre-Supplier Contract Assurance or Post Contract Reviews
Ensure that all Operational and supplier facing activity meets Barclays policy, compliance, and audit requirements
Conducting special reviews on request for enabling functions like ISO 27001 Compliances, Corporate Citizenship (CSR) as per Indian Companies Act 2013, Human Resource (Contract Labour Regulation & Abolition Act)
Conducting 'Issue Assurance' activity for all the closed observations to assess the effectiveness of action taken
Work with Global Risk Leads for deviations from the standard template agreement
Updating One Source, Coupa, OPUS/ORAC with Risk Event Reports (RERs) & publishing RER log periodically
Identifying process improvements opportunities and assist in implementation of control best practices across in-scope business areas.
Education
MBA -
Symbiosis
Noida
07.2016 - 06.2018
Bachelor of Arts -
G.S. College of Commerce & Economics
Nagpur
04.2007 - 03.2010
Skills
Third Party Risk Management
undefined
Certification
ISO/IEC 27001:2013 ISMS Lead Auditor
Accomplishments
Spot Award for 'Excellence Service' for delivering exceptional service and project delivery (Q2, Q3' 2022 & Q1, Q3'2023)
Awarded BT Recognition for 'Brilliant' in Q2'2020 for delivering work beyond expectation
Part of core team at British Telecom receiving Global Procurement Risk Award in 2020 for implementing TPRM Function
Nominated for BT Procurement Awards 2021 in 'Rookie' category for implementing & deploying Data Feeds functionalities
Awarded Best Performer for the Quarter Q1'19
Awarded Barclays Recognition for Excellence in Q1'18
Awarded Star Performer (Oct'11, July'12, Mar'14, Jan'15 & Mar'16)
Timeline
Manager/ Assistant Director (Enterprise Risk & Third-Party Risk Management)
Ernst & Young GDS LLP (EY)
11.2021 - Current
Procurement Enablement Professional (TPRCC)
British Telecom (BT)
12.2019 - 10.2021
MBA -
Symbiosis
07.2016 - 06.2018
Assistant Manager (Risk & Controls)
Barclays Global Service Centre Pvt. Ltd. (BGSC)
03.2011 - 12.2019
Bachelor of Arts -
G.S. College of Commerce & Economics
04.2007 - 03.2010
ISO/IEC 27001:2013 ISMS Lead Auditor
Similar Profiles
Ridhi WadhwaRidhi Wadhwa
Assistant Manager at Ernst & Young – Global Delivery Service (EY GDS) US ClientsAssistant Manager at Ernst & Young – Global Delivery Service (EY GDS) US Clients