Looking for a job

Anit Banerjee

@anitbanerjee

Head of Third-Party Risk Management at Meta, where I govern 50,000+ vendor relationships and built an AI risk assessment framework.

United States

Message

At Meta, I govern the third-party risk lifecycle for a portfolio of 50,000+ vendors across 14 risk verticals. I designed and operationalized a third-party AI risk assessment framework mapped to the NIST AI RMF and EU AI Act.

For a generative-AI vendor, I identified regulatory risk triggers and built a control-mapping matrix addressing NIST AI RMF and Colorado AI Act requirements. I delivered an AI Third-Party Risk Assessment Report and remediation roadmap requiring logging and data-lineage controls before production deployment.

At Lam Research, I built the company’s first enterprise TPRC program and maturity roadmap. I also executed 130 supplier risk assessments in 180 days and established monitoring and reporting to help leaders track lifecycle health.

At LendingClub, I developed enterprise risk governance and supported preparation for OCC, NYDFS, and FFIEC examinations. My work across financial services, technology, and semiconductor organizations includes regulatory compliance, board reporting, and third-party risk; I hold a J.D. focused on Cybersecurity, Data Privacy & RegTech and am CAMS certified.

Experience

Work history, roles, and key accomplishments

Current

Head of Third-Party Risk Management

Current

Third-Party Risk Leader

Lam Research

Oct 2020 - May 2022 (1 year 7 months)

Built Lam Research's first enterprise TPRC program end-to-end, developing risk criteria, governance model, and maturity roadmap. Executed 130 supplier risk assessments in 180 days and integrated continuous monitoring with SecurityScorecard.

TPRM GRC Supplier Risk Assessment SecurityScorecard ISO 27001 KPI development SOX and ITGC Compliance Risk Governance Training

Tech Risk & FTC Audit Consultant

Credit Karma

Jul 2020 - Oct 2020 (3 months)

Advised on an FTC regulatory audit of technology controls and developed SOC 2 Type 2 controls in partnership with Deloitte. Created TPRM and Data Privacy assessment models and benchmarked third-party monitoring platforms.

FTC Compliance SOC2 TPRM Data Privacy Privacy By Design BitSight SecurityScorecard CyberGRX

Sr. Tech Risk Manager

LendingClub

Dec 2018 - May 2020 (1 year 5 months)

Architected and operationalized LendingClub's enterprise-wide risk management program, including 2LOD governance frameworks, in preparation for OCC, NYDFS, and FFIEC examinations. Directed Cyber TPRM framework and Tech Risk policies.

ERM GRC TPRM NIST ISO NYDFS GDPR CCPA ServiceNow GRC Archer Risk Assessment Board Reporting

Risk Manager / Risk Officer

Middlesex Savings Bank

Aug 2017 - Nov 2017 (3 months)

Enhanced information security, vendor management, and AML/BSA programs, including management of the enterprise-wide Risk Assessment Model. Negotiated third-party agreements for 700+ vendors and directed FDIC In-TREX preparation.

Infosec Vendor Management AML BSA Risk Assessment NIST 800 53 Business Continuity Penetration Testing Change Control

Risk Analyst – Regulatory Risk & Compliance / GRC

Santander Bank

Sep 2013 - Jul 2017 (3 years 10 months)

Spearheaded the Global Privacy and TPRM program, directing incident management for data breaches and maturing Privacy-by-Design frameworks. Orchestrated AML/BSA and sanctions compliance audits and tracked regulatory enforcement actions.