Harsh Arora

About Harsh Arora

I am an experienced Vendor Risk Assessment professional with a strong focus on evaluating…

Experience

1. Vendor Risk Management Analyst

   Milliman

   May 2022 — Present

   Configuration of Third-Party Risk Management module on OneTrust. Modification of SIG Lite on OneTrust. Creation of Onboarding Checklist for new vendors on OneTrust. Inventory Management on OneTrust. Assessment of New and existing Vendors through OneTrust. Performing end to end third party Information Security Assessment for our client. Performing the checks for effectiveness and design adequacy for security controls within organization. Gap assessment, policy review, identifying areas of improvement. Identification of security gaps in vendor security model and maintain compliance for them. Performing audit to check conformity of many controls from ISO 27001:2013 standard. Providing maturity rating for each control of the organization and creating CAP report for the client. Scheduling and performing end to end follow-ups for end-to-end process assessment. Vendor Risk assessment for client, identification of security gaps in vendor security posture and assessing their SOC 2 Type II report along with security policies and maintain compliance for them. Identify, detect, and measure risk associated with vendor security controls. Document risks and recommendations based on a vendor’s lack of control. ITIL Process, change management, Incident management as per defined policies of Vendor.