Thomas Mathew
Risk Analyst at EY Kochi | ISO 27001:2022 LA | Specialising in TPRM | Information Security Enthusiast | Computer Science Engineer
- Role
- Risk Analyst at EY
- Location
- Kochi, KL, IN
- LinkedIn followers
- 500 followers
About Thomas Mathew
Highly motivated Risk Analyst with a strong background in Computer Science Engineering…
Experience
Risk Analyst
Jan 2024 — Present · Kochi, IN
Conducting Third-Party Risk Assessments (TPRM) by evaluating vendors through Inherent Risk Analysis (IRA) and detailed due diligence questionnaires based on the vendor’s risk tier.Assessing vendors against global information security standards and frameworks, including ISO/IEC 27001:2022, NIST CSF, and SOC 2, to identify control gaps and recommend risk mitigation measures.Reviewing security documentation such as policies, SOC reports, and certifications to assess vendor control effectiveness.Supporting the risk mitigation process by identifying control gaps, suggesting compensating controls, and tracking remediation actions to closure.Collaborating with internal stakeholders and vendor contacts to clarify responses, assess control maturity, and prepare consolidated risk summaries.Maintaining quality control by performing peer reviews, ensuring completeness and accuracy of assessments before client submission.Managing group mailbox operations — monitoring incoming vendor responses, assigning tasks to analysts, and ensuring timely and consistent communication across the team.Collaborating closely with internal and client-side stakeholders to clarify responses, assess evidence, and finalize due diligence reports.
Education
Saintgits College of Engineering (Autonomous)
Bachelor of Technology - BTech
2019 — 2023
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.