Harsh Dalal

Third Party Risk Management Analyst @Amalgamated Bank

NY, US

Driving vendor risk automation and security assessment operations at America\'s largest B Corp bank, reporting to the TPRM Manager within Enterprise Risk- Architected an AI-powered SOC report analysis platform (Express/TypeScript + React) that ingests SOC 1/SOC 2 Type II reports and extracts Control Objectives, Exceptions, and CUECs into structured Excel workbooks — reducing manual review time by an estimated 80%- Built a multi-pass LLM extraction pipeline leveraging Gemini API with JSON-mode parsing, year-over-year delta comparison, and automated security posture documentation for InfoSec leadership- Designed and executed a CMDB–vendor reconciliation engine across 429 internal applications and 3,061 vendor records using a 6-step matching methodology (exact → fuzzy → substring → manual mapping → deep search), achieving ~55% automated match rate and identifying critical coverage gaps including a missing Tier-1 digital banking platform- Performed due diligence assessments on third-party vendors: evaluated SOC 2 Type II reports, security questionnaires, and compliance certifications against ISO 27001, NIST CSF, and banking regulatory standards- Delivered risk analytics dashboards and PowerPoint reporting for the Risk Committee, translating vendor risk data into executive-level insights- Collaborated cross-functionally with IT Security, Legal, and Compliance to coordinate control exception remediation and define first/second line-of-defense responsibilities.