Sheye Dare

About Sheye Dare

Highly motivated and results-driven IT auditor and Controls specialist with experience in audit and control, risk assessments and vendor/Third party Risk Assessment. In-depth knowledge of Sarbanes-Oxley Act (SOS) application control risk assessment, IT General Controls (ITGC) and SAS70/SSAE18 attestation. Security Control Assessment depth knowledge of HITRUST, SIG, SSAE 18 (SOC1,SOC2), NIST 800-53,NIST 800-37, NIST 800-137, PCI-DSS to achieve Confidentiality, Integrity, Availability of Information Systems.

Experience

1. Sr Risk Assessor

   Charter Communications

   Oct 2023 — Present · US

   Performs focused third-party risk assessments of existing or new services and technologies, along with business counterparts.• Identifying the risks to the enterprise presented by a relationship with a specific vendor, regardless of the nature of that relationship.• Communicates risk assessment findings to Procurement, business line owners or information governance teams and information security teams.• Provides consultative advice to information governance or security teams that enables them to suggest informed risk management decisions.• Identifies and facilitates implementation of appropriate controls to effectively manage third party risks as needed.• Identifies opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk.• Maintains strong working relationships with individuals and groups involved in managing information risks across the organization.• Evaluating the vendors risk position and collaborating with it to address any issues that are discovered.• Coordinates the classification and tiering of vendors by risks and risk impacts• Builds communication and escalation plans around vendor risk management activities within the enterprise• Understands and applies relevant regulatory and legal compliance requirements• Manages vendor risks as defined in vendor contracts and in accordance with existing risk management programs and policies• Develops, monitors and possibly executes vendor remediation actions, mitigation and contingency plans when risks or events are identified• Ensures third-(and increasingly, fourth) party vendor regulatory compliance• Coordinates the gathering of vendor risk assessment data and prepares risk assessments for critical-related vendors as needed, to be published and communicated to stakeholders• Requesting the vendors perspective of the relationship and its level of compliance in applicable areas of concern.

Education

• Sheffield Hallam University

  GED, business and English

  2012 — 2013