At EY, I conducted vendor security assessments, reviewed evidence, and validated compliance across third-party environments. I analyzed contracts, certifications, and security controls to identify risks and compliance gaps.
I supported risk reporting, ORR documentation, and control mapping aligned with ISO 27001 and ISMS practices.
On my TPRM Identity Governance & DPDP Compliance project, I implemented Microsoft Entra ID-based governance for third-party vendors aligned with India’s DPDP Act 2023. I configured access controls and automated vendor offboarding and audit logging.
