At Capgemini Technology Services India Ltd, I managed the third-party risk lifecycle using ServiceNow VRM, from onboarding and inherent risk scoring to control validation and periodic reviews. I implemented a risk tiering framework that reduced the high-risk vendor backlog by 25%.
I reviewed SOC 1 and SOC 2 Type II reports, mapped controls to internal ITGC requirements, and tracked remediation actions. This work achieved 90% closure within defined SLAs and supported audit and compliance reviews.
At Max Infra (I) Pvt. Ltd, I managed third-party risk assessments across infrastructure and enterprise operations, using ISO 27001 and NIST guidelines. I streamlined due diligence workflows to reduce vendor onboarding time by 30%.
Earlier at Max Infra (I) Pvt. Ltd, I implemented SAP GRC Access Control 12.0, including SOD rule set design and mitigation monitoring. I also supported access governance across ECC 6.0 and S/4HANA environments.
