Ines Deric

Experience

1. Third Party Risk Analyst

   Rockwell Automation

   Jul 2023 — Present · Milwaukee, WI, US

   Performing third party risk assessments on all incoming third parties for information security controls, based on frameworks such as NIST CSF, ISO 27001, SOC 2 TYPE II, & SIG (~10-20 intake forms and ~5-15 information security questionnaires, weekly)• Acting as the main POC for third party risk inquiries from the business and OneTrust functionality inquiries from other teams• Maintained operations as the sole person on the team, without manager, for ~7 months• Training 2 employees on our current third party risk process and on OneTrust usage to become independent TPR analysts, by hosting working sessions and creating training documentations of step-by-step documents and Visio diagrams• Strengthening working relationships with other teams involved in the risk assessment process (Privacy Office, AI Governance Council, Product Security team, Enterprise Architecture team, and Procurement), by continuously suggesting/implementing ways to be less siloed and increasing cooperation• Providing CISO risk reports for each incoming third party, with inherent/residual risks and their corresponding treatment plans, to encourage business owners to make fair risk decisions• Collaborating with the Business Continuity and Procurement teams to assess top 100 critical suppliers (based on operational revenue), to find/implement ways of increasing the security resiliency of our supply chain network• Dedicating 1 day per week (at min.) to implementing self-driven or requested process improvements

Education

• Lakeland Community College

  Associate of Arts - AA, General Studies

  2015 — 2017

• Cleveland State University

  Bachelor of Science - BS, Computer Science

  2017 — 2021