Gana R

About Gana R

An experienced cyber security professional specializing in information security and Third Party Risk management with over 6 years of professional record focusing on information risk management, IT audit, and policy management. I am a confident, innovative, and hardworking individual with some leadership skills working with a team or independently with little or no supervision. Experience in supporting security audits, continuous monitoring, control assessment, developing risk assessment reports, and managing risk mitigation, focusing on delivering efficient and cost-effective solutions.

Experience

1. Third Party Risk Compliance Analyst

   Shein Technology Llc

   Feb 2022 — Present · US

   Conduct third-party risk assessments including operational risk, financial risk, security risk, and legal risk for potential third-party agreements.• Identify security risks and exposures, determine the root causes, and recommend a plan of action to improve the security posture.• Prepare risk assessment reports to inform risk treatment decisions.• Track and monitor remediation and risk management activities to closure.• Develop and maintain third-party risk management program documentation and templates such as risk assessment processes, security questionnaires, security requirements in the vendor agreements, and assessment report templates.• Work closely with technology and legal partners and business units to ensure appropriate security and data protection requirements are incorporated into third-party engagements.• Maintain a current and comprehensive understanding of relevant industry standards to incorporate into the third-party risk management strategy, framework, and program.• Support integration and maturation of policy, compliance, and risk frameworks.• Generate technical and executive metrics for visibility and continuous improvement for the TPRM.• Response to day-to-day ServiceNow ticketing from the Global Security Risk Management to provide information security advice to ensure information risk management decisions. • Document and maintain procedures related to third-party risk management.• Contributes to creating and maintaining the library of information, policies, and standards based on ISO 27001 and other industry’s best practices.• Supports termination of vendors\' contracts (end of life).

Education

• University of Buea

  Bachelor's degree

  2011 — 2014