VIVEK MATE
Cyber & Strategic Risk Consultant | GRC | TPRM
Pune,MH
Summary
Engineering and MBA graduate with experience in Cyber and Strategic Risk Consulting at Deloitte, specializing in IT Risk Management, Third-Party Risk Management (TPRM), Vendor Risk Assessments, Data Protection Assessments, and compliance reviews. Experienced in working on SOC 2 and ISO/IEC 27001 aligned engagements, risk assessments, and cybersecurity governance activities. ISO/IEC 27001 Lead Auditor certified with CompTIA Security+ training and prior experience in Software and IT Asset Management.
Overview
2
2
Certifications
3
3
years of professional experience
Work History
Cyber & Strategic Risk Consultant (Associate Solution Advisor)
Deloitte USI
02.2023 - Current
- Performed Data Protection Assessments and third-party security assessments for clients to evaluate vendor risks and information security practices.
- Identified control gaps, documented risk observations, and tracked remediation
activities with relevant stakeholders.
- Collaborated with internal teams and clients to support Governance, Risk, and Compliance (GRC) initiatives and risk mitigation efforts.
- Conducted IT Risk Assessments and Third-Party Risk Management (TPRM) reviews using standardized security questionnaires and control evaluation processes.
- Worked on SOC 2 related assessments and compliance review activities as part of cybersecurity and risk management engagements.
- Supported ISO/IEC 27001 aligned risk assessment, compliance documentation, and ISMS review activities.
Earlier Experience in ITAM
- Managed Software Asset Management (SAM) activities using Flexera.
- Supported license compliance, audits, entitlement reviews, and cost optimization initiatives.
- Assessed over 150 vendors for contract compliance, license risk, and operational exposure.
- Performed IT asset lifecycle management, reporting, and tool health checks.
Education
Master of Business Administration (MBA) -
Indira Global Business School
PuneBachelor of Engineering - Electronics & Telecommunication
Sanjivani College of Engineering
KopargaonSkills
IT Risk Assessment
Third-Party Risk Management (TPRM)
Governance Risk and Compliance (GRC)
ISO/IEC 27001:2022 LA
Vendor Risk Assessment
Certification
ISO/IEC 27001:2022 Lead Auditor Certified
Timeline
ISO/IEC 27001:2022 Lead Auditor Certified
04-2026
Cyber & Strategic Risk Consultant (Associate Solution Advisor)
Deloitte USI
02.2023 - Current
Bachelor of Engineering - Electronics & Telecommunication
Sanjivani College of Engineering
Master of Business Administration (MBA) -
Indira Global Business School