Open to opportunities

Kevin Ogie

@kevinogie

Message

Results-driven Senior Third-Party Risk Analyst with extensive experience.

United States

Message

What I'm looking for

I seek a role that fosters collaboration, emphasizes compliance, and offers opportunities for professional growth.

I am a results-driven Senior Third-Party Risk Analyst with over 8 years of experience in IT risk management, vendor assessments, and regulatory compliance within the financial and healthcare sectors. My expertise lies in evaluating third-party security controls, conducting risk assessments, and aligning vendor governance programs with leading frameworks such as NIST 800-53, ISO 27001, GDPR, SOC 2, and HIPAA.

Throughout my career, I have successfully managed end-to-end third-party risk processes—from onboarding to ongoing monitoring—leveraging platforms like RSA Archer, ServiceNow GRC, and Tableau for effective risk tracking and reporting. I am skilled at driving cross-functional collaboration, improving vendor oversight programs, and delivering actionable risk insights that support enterprise security and compliance objectives.

Experience

Work history, roles, and key accomplishments

Current

Senior Third-Party Risk Analyst

Current

Wells Fargo Bank

May 2022 - Present (4 years 1 month)

Led and executed third-party risk assessments across 50+ vendors annually, ensuring compliance with regulatory frameworks including ISO 27001, NIST 800-53, GDPR, and HIPAA. Utilized RSAArcher and ServiceNow GRC platforms to track third-party risk issues, automate risk workflows, and improve reporting efficiency by 40%.

Regulatory Compliance ISO 27001 NIST 800 53 GDPR HIPAA)RSA Archer Tableau Power BI HIPAA

Snr GRC Project Manager

Amazon Web Services (AWS)

May 2018 - Present (8 years 1 month)

Implemented risk-based security frameworks that increased regulatory compliance from 85% to 99% within cloud environments. Performed third-party vendor security assessments for 200+ AWS partners, reducing third-party risk exposure by 35%.

GRC Cloud Security Regulatory Compliance NIST Third Party Risk Management PIPEDA GDPR SIEM IAM RSA Archer

IT Security & Compliance Analyst

UnitedHealth Group

Feb 2012 - Present (14 years 4 months)

Performed HIPAA risk assessments across 500+ healthcare applications, ensuring 100% compliance with patient data security regulations. Developed and managed third-party vendor risk assessment programs, strengthening compliance oversight for 75+ vendors.

HIPAA)Data Privacy Third Party Risk Management Incident Response Endpoint Security IAM PCI DSS HIPAA