Jeremy Watson

About Jeremy Watson

Cybersecurity professional specializing in Third-Party Risk Management (TPRM) with hands-on experience in vendor monitoring and regulatory compliance.Passionate about mitigating third-party cyber risks in the financial sector. Currently, I support CyberTPRM initiatives by- Monitoring vendors for confirmed data breaches using BitSight- Reconciling and analyzing monthly security incident reports (SIR)- Developing and documenting control statements for monitoring procedures- Leveraging tools like ProcessUnity and Archer RSA for governance, risk, and compliance (GRC)With a strong foundation in healthcare cybersecurity (HCISPP certified) and 15+ years in information security, I bring a unique blend of privacy expertise (HITRUST, HIPAA) and practical risk assessment skills to enhance vendor security postures.Key strengths: Vendor risk assessments, breach response tracking, procedure documentation, and cross-functional collaboration in fast-paced environments.Open to connecting with fellow TPRM, cybersecurity, and GRC professionals. Let\'s discuss emerging risks in third-party ecosystems!#TPRM #Cybersecurity #VendorRisk #BitSight #GRC

Experience

1. Cyber Security Analyst Iii

   First Citizens Bank

   Mar 2023 — Present

   Delivered expert cybersecurity advisory services to business units and supported enterprise-wide security initiatives in a highly regulated financial environment.Independently assessed information security risk for 200+ third-party vendors by evaluating SIG/SIG Lite questionnaires, SOC 2 Type 2 reports, NIST framework alignment, policies, and supporting evidence.Reviewed and redlined security exhibits in Master Service Agreements (MSAs) and other contracts; collaborated with procurement and legal teams to ensure enforceable, risk-based terms.Served as Tier-2 escalation point for junior analysts on complex vendor risk assessments and control interpretation.Managed full TPRM lifecycle including risk profiling, gap identification (100+ findings), remediation tracking, and continuous monitoring using GRC platforms.Drove risk mitigation decisions across multiple stakeholders (technology, business, legal, compliance) to balance security requirements with business objectives.Ensured vendor compliance with GLBA, CCPA, EU GDPR, SOX, and other data privacy and financial regulations through documented controls and remediation plans.Identified and implemented process improvements that matured the overall TPRM program, increasing efficiency and risk visibility.Produced executive and regulatory reports demonstrating adherence to policy, risk posture, and remediation status.Developed the continuous monitoring program of third parties.

Education

• South College

  BS, Health Science

• Roane State

  AS, Natural Science

Skills

• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Infectious Diseases
• IT Risk Management
• Managed Care
• Teaching
• Biotechnology
• Leadership
• Training
• Oncology
• Risk Management
• Cardiology
• Medicine
• IT Service Management
• Risk Analysis
• Hospitals
• Public Speaking
• Computer Security
• Pharmaceutical Sales
• Pharmacology
• Policy Analysis
• Hitrust
• Pharmacy
• Healthcare Information Technology (Hit)
• Information Security
• Policy Writing
• Healthcare
• Risk Assessment
• Neurology
• Clinical Research
• Gap Analysis
• Lifesciences
• Pharmaceutical Industry
• Computer Networking
• Hipaa
• Diabetes