Mounica Vishy

Conducted security risk assessments for new and existing vendors, evaluating their compliance with frameworks Reviewed vendor security questionnaires (Lite, Core, Custom) Assessed Third-party risks in key areas like Data protection,Access Management, Incident Response and Business Continuity Created detailed reports summarizing assessment findings, risk ratings and remediations for stakeholders Worked closely with Procurement, Legal and IT Security Teams to streamline vendor onboarding process

Optimization of Third-party Risk Management to meet the organizational goals and industry standards Collaborate with different departments and third parties during onboarding activities Lead security assessments for all Third-party service providers Monitored and tracked TPRM lifecycle, review various reports to identify gaps in vendor's security posture Review, manage and update policies, procedures and control implementations Worked on ISO 27001 control mapping and adherence

Served as SOC analyst for real-time monitoring, analyzing logs from various security appliances using SIEM Carry out log monitoring and incident analysis for various devices like Proxy, AV, Firewalls, IPS, databases and servers Perform Phishing/ Spam analysis, working on breached incidents Communicate Tactical Threat Intelligence information to assist in defensive mechanisms Conduct security audits, design security solutions, improve security and risk management using ISO 27001:2022 ISMS standards