Helmult Eshun

Experience

1. Information Security Analyst

   Sam's Club

   Aug 2019 — Present · Houston, TX, US

   Performs risk assessments on organizational controls around information security including cyber and physical, business continuity and disaster recovery, resiliency, privacy, and governance• Demonstrated expertise and practical experience in implementing and adhering to industry-leading cybersecurity standards and frameworks, including ISO 27001, NIST SP 800-171, NIST SP 800-53, COBIT, and PCI-DSS.• Coordinates and manages the due diligence risk assessment of third-party services by internal subject matter experts • Performs review of completed vendor assessment questionnaires for conformance to program objectives and methodology• Collaborates with team members to track, update and improve Vendor Risk Management Program procedures and process• Assists with providing monthly reporting and other matrices to GRC and Security leadership teams• Prepares third-party risk assessment summary reports• Builds relationships with internal stakeholders and vendors and encourages collaboration• Monitors and assess supplier performance to ensure compliance with VRM programs, regulatory requirements and service level agreements• Organizes the collection of required artifacts (e.g. SOC reports, flow diagrams, policy documents) from suppliers regularly• Collects supporting documentation for external and internal audit requests.• Works with business leaders and vendor relationship managers to document appropriate remediation plans to reduce identified vendor risks