Sana Shaikh

Plan and conduct third party risk assessments with appropriate stakeholders in alignment with the company security policies and industry * Reporting on credit risk and other potential risks from key vendors and * Providing periodic risk reports to the leadership team on key risks and mitigation strategies. * Provide input and aid in the development of policies focused on the security of the third-party business process. Document and implement the standard operating procedures according to industry Standard.

Working with American Express global multinational bank to support their third-party risk management program. The project comprises of assessing the suppliers on their cyber security controls landscape and reporting the areas of weaknesses and noncompliance to the client. * Perform end to end third party risk assessment for American Express and New York life insurance client.

Perform audit and consulting assignments related to SSAE 18 - SOC1, SOC2, IT security, ITGC, ITAC, IPE AND interface controls network security, IT processes covering IT management, IT operations and related business processes for various banks and organizations.

IT internal auditor

Masters in information Technology