Open to opportunities

Beatrice NT

@beatricent

Message

Senior third-party risk and GRC analyst specializing in vendor risk, compliance, and audit readiness.

United States

Message

What I'm looking for

I’m looking for a role where I can lead third-party risk programs end-to-end, strengthen GRC and audit readiness, and partner with Legal, Procurement, and executives to reduce vendor and compliance risk.

I’m a senior third-party risk and governance, risk and compliance (GRC) analyst with 7+ years of experience leading vendor risk assessments and regulatory compliance work across highly regulated financial and healthcare environments. I evaluate third-party control environments and perform security control analysis, aligning enterprise risk programs with NIST, ISO 27001, PCI DSS, HITRUST, and SOX.

In my current role, I develop and operationalize third-party risk management (TPRM) security policies and procedures, build standardized workflows and assessment templates, and run end-to-end vendor due diligence across cloud, SaaS, and high-risk vendors. I conduct privacy impact assessments (PIAs), deliver executive-level risk reporting, and support continuous monitoring using Archer and Venminder, while partnering with Procurement, Legal, and business units to strengthen contractual risk clauses and remediation strategies.

Experience

Work history, roles, and key accomplishments

Current

Third-Party Risk Analyst

Current

Wells Fargo

Jan 2021 - Present (5 years 6 months)

Developed and operationalized a Third-Party Risk Management program, including standardized workflows, due-diligence procedures, and ongoing vendor compliance assessments. Conducted security/control evaluations against HITRUST, PCI DSS, ISO 27001, and NIST and delivered executive-level risk reporting.

Third Party Risk Management (TPRM)Due Diligence Risk Assessment Regulatory Compliance HITRUST PCI DSS ISO 27001 NIST SOX Compliance Assessments Archer Venminder Executive Risk Background Checks

Governance Risk and Compliance Analyst

CVS Health

Jul 2017 - Dec 2020 (3 years 5 months)

Established and maintained governance and compliance policies, planned and executed internal audits, and served as the liaison between auditors and technical/business stakeholders. Performed security risk assessments, supported corrective action plans, and conducted third-party vendor security assessments.