Blesse Ndum

About Blesse Ndum

Detail-oriented Third Party Risk Analyst with a proven track record of delivering…

Experience

1. Third Party Risk Analyst

   DTE Energy

   Jun 2022 — Present

   Ensured cyber security policies are adhered to and controls are implemented. Knowledge in supporting a security program within industry-leading compliance frameworks and regulations (ISO2700, GDPR, CCPA, PCI DSS, NIST, HIPPA, SOC 1, 2, and Privacy compliance. Review evidence such as SIG, SOC2, and PENTEST scan results and policies. Assisted in the design, implementation, training, and maintenance of common controls framework for continuous testing and monitoring of all information security controls and activities related to SOC2, PCI-DSS, and Sox. Assisted in Analyzing and updating existing Compliance policies and related documentation. Educate Management and other departments regarding compliance policies. Evaluate the Audit/Inspection Readiness process, procedure, and checklist artifacts periodically to ensure documentation is well-updated and evaluated for optimization. storage, and transmission of payment and PII data. Coordinate with risk owners to develop recommendations for risk response and monitoring plans. Conduct security assessment/audit timeline for questionnaire, interview, evidence verification, and report preparation. I act as a remediation analyst to work with vendors in remediating findings discovered during the assessment. performed internal audits of systems before external auditing and Continued Monitoring Activities. Support the development and maintenance of enterprise risk management policies, standards, procedures, tools, and information systems. Interact with internal stakeholders to deliver risk analyses and perform related tasks. Find process gaps or areas of concern and develop recommendations for risk response and monitoring plans. Find, document, and organize related metrics and prepare reports as asked. Hands-on with tools such as Service Now for Ticket, BitSight for Third Party Risk Assessment, and GRC Archer depending on what you are comfortable conducting the security assessment with. Review more details on my resume.