Idris Orire

About Idris Orire

Experienced Third-Party Risk Analyst with 5+ years of expertise in vendor risk assessments, regulatory compliance, and governance frameworks. I specialize in leveraging GRC tools like RSA Archer, Quantivate, and Jira to streamline and strengthen risk management processes. My background includes assessing vendor controls to ensure alignment with internal policies and external regulations, and effectively translating complex risk concepts for non-technical stakeholders. I’m passionate about driving actionable remediation strategies to improve security posture and support business resilience. Governance, Risk and Compliance (GRC)| Third Party Risk Analyst | Vendor Risk Analyst | IT Risk Assessor | CRISC | CompTIA Security+

Experience

1. Third-party Risk Specialist

   Connexus Credit Union

   Apr 2024 — Present

   Conducted ongoing security risk assessments for 50+ third-party vendors for compliance with internal *TPRM policies and federal regulations, identifying and mitigating risks through collaborative efforts.*Evaluated vendor operations, fourth-party relationships, and compliance standards to identify and mitigate risks*Executed the TPRM lifecycle, including due diligence, periodic monitoring, and vendor offboarding.*Performed focused third-party risk assessments of existing or new services and technologies, along with business counterparts.*Reviewed vendor documentation, assigned risk rankings, and communicated findings to relevant teams.*Executed comprehensive risk assessments of third-party vendors and service providers to evaluate their capabilities, controls, and adherence to internal policies, standards, and regulatory requirements.*Maintained an end-to-end third-party risk management program in collaboration with internal stakeholders.*Authored formal risk assessment reports and presented findings to Procurement, Legal, and Business Owners.*Utilize and work to enhance TPRM technology to follow the due diligence process and escalate issues and concerns (e.g, oversight deficiencies, program concerns, and open risk items)*Review control effectiveness evidence to assess the quality and effectiveness of the implemented controls.