Aaftab Khan

About Aaftab Khan

More than 7 years and 9 months of experience, with 5+ years of experience in third party risk management, third party assessment execution and risk consulting focusing on Information Security and Third-Party Risk management solutions. Performed Third Party Risk Management Consulting, including framing Third Party IRQ (Inherent Risk Questionnaire) and RRQ (Residual Risk Questionnaire) for various clients. Worked on multiple Third-Party Risk Management (TPRM) projects which involved assessing the clients third party information security posture. Conducted third party audits, IT audits and assessments, process reviews, and implementation of remediation for the gaps that were identified during the process. Conducted both remote and onsite third-party assessments, IT risk assessments, and process reviews. Worked on projects to transform the clients’ existing due diligence process which included re-designing a new questionnaire based on client’s existing control standards for each risk domain. Re-designed the due diligence questionnaire for risk domains such as (Fraud, Information Security, Financial, Geo-political, Legal & Compliance, Operational, Privacy, Reputational, Business Continuity and Subcontractor). Assisted in designing a Service Catalogue based on the existing risk taxonomy and proposed new taxonomy of the client. The project also involved designing a third-party risk control framework which incorporates all the major global regulatory requirements related to third party risk. This included re-designing of the Inherent Risk Questionnaire to identify areas for improvement in the current inherent risk and residual risk questionnaires and creation of guidance documents.

Experience

1. Manager - Tprm

   EY

   Feb 2022 — Present

Education

• CMR Institute Of Management Studies

  Bachelor of Computer Application, Bachelor of computer applications

  2011 — 2013

• CMR National Junior College

  Pre University College, P.C.M.C

  2007 — 2009

Skills

• Vlookup
• Accounting
• Teamwork
• Data Analysis
• Six Sigma
• Data Validation
• Financial Accounting
• Microsoft Office
• Management
• Powerpoint
• Strategic Planning
• Microsoft Word
• Business Analysis
• Financial Analysis