Amit Pandey

About Amit Pandey

Results-driven IT Security and Operations professional with over 6 years of extensive experience in managing security operations, compliance, and risk management across diverse sectors. Proven expertise in leading security audits, risk assessments, policy and procedure development, and third-party risk management. Seeking to leverage deep knowledge in Information Security Operations to enhance organizational security posture and contribute to strategic security initiatives.

Experience

1. Solution Delivery Advisor

   Deloitte

   Jan 2022 — Present · IN

   Third party Risk management.Role: • Identifying data sensitive vendors/service providers and prioritizing them based on their data severity.• Creation of assessment checklist as per industry best practices, continuous coordination with external auditors to create audit plan and conduct vendor assessments.• Publishing audit findings to business team and vendor, ensuring vendor complied with audit checklist, and getting open observations closed.• Risk leveling of vendors post assessment cycle and publishing of their assessment report for senior management review.• Continuous monitoring of critical vendors to reduce the cyber risks associated with them.• Engaging with business and third-parties to understand better,size and scope of the assessment based on NIST framework.• Taking Charge of creating an enhanced process flow diagram using Lucid chart for the team and for the new staffs.2nd Project-•Developed and maintained comprehensive documentation, including policies, procedures, risk assessments, and evidence of controls on behalf of client.•Facilitated mock audits and pre-audit assessments to ensure audit readiness.•Taking Charge of creating an enhanced process flow diagram using Lucid chart for the team and for the new staffs.•Reviewed market regulations and industry standards to ensure alignment with current requirements•Provided updates to senior management and stakeholders on certification progress and audit outcomes.•Received, reviewed, and analyzed client security questionnaires (ISQs) using ManageEngine; ensured timely, accurate responses.•Developed understanding of client security needs; collaborated with account managers and internal teams for aligned responses. Tools- Archer,ServiceNow, BMC remedy, PowerPoint, Excel

Education

• Dr. A.P.J. Abdul Kalam Technical University

  B.tech

  2014 — 2018