# Kwame Asante

Kwame Asante is a remote worker on Himalayas, Vice President – Global Third-Party Cyber Risk Lead at State Street Corporation, based in United States.

Source: https://himalayas.app/@kwameasante

```text
Third-Party Cyber Risk Lead at State Street, standardizing global vendor assessments and reporting across a 15-person team.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | United States |
| Authorized to work in | United States |
| Salary expectations | 70k+ INR |
| Job categories | Third Party Risk Manager |
| Skills | Third Party Risk Management, Third Party Risk, Vendor Cyber Risk, Cybersecurity Due Diligence, Continuous Monitoring, Remediation Governance, Risk Acceptability, Information Security and Risk Management, Cybersecurity Governance, Second Line Of Defense Risk Function, GRC, Control Assessment, Vendor Risk Assessment, Vulnerability Management, Cloud Security Risk |

## About

```text
At State Street Corporation, I lead the global Third-Party Cyber Risk Management program, covering due diligence, monitoring, reassessment, remediation, and risk acceptance. I manage a 15-person team across the U.S., Ireland, Poland, and Singapore.

I’ve standardized assessment practices, risk documentation, escalation procedures, and executive reporting across the program. I also report material findings, remediation ageing, risk exceptions, emerging risks, and vendor trends to improve executive and board visibility.

Previously, I assessed high-risk third parties at State Street Corporation and worked in cybersecurity and GRC roles at Bank of America and United Health Group. My experience includes security evidence review, vulnerability remediation, cloud risk assessment, and regulatory and audit readiness; I hold CISA, CISM, and CTPRP certifications.
```

## Experience

### Vice President – Global Third-Party Cyber Risk Lead (current)

[State Street Corporation](https://himalayas.app/companies/state-street). Jan 2025 - Present

```text
Leads the global Third-Party Cyber Risk Management program, managing a 15-person team across multiple countries and overseeing due diligence, monitoring, remediation, and risk acceptance for critical vendors.
```

Skills: Third-Party-Risk-Management, Cybersecurity-Due-Diligence, Continuous-Monitoring, Risk-Acceptability, Remediation-Governance, NIST-CSF, ISO-27001, SOC-1-SOC-2, CAIQ-CSA-CCM, SIG, HITRUST, ServiceNow-GRC-IRM, SecurityScorecard, Power-BI, Jira, SharePoint, Excel, Tenable-Nessus, AWS

### Assistant Vice President – Global Third-Party Cyber Risk

[State Street Corporation](https://himalayas.app/companies/state-street). Jul 2022 - Dec 2024

```text
Assessed complex and high-risk third parties, evaluated control effectiveness using SOC reports and ISO 27001, and drove vendor security findings toward resolution while standardizing due diligence practices.
```

Skills: Third-Party-Risk-Management, Cybersecurity-Due-Diligence, SOC-1-SOC-2, ISO-27001, HITRUST, NIST, CSA, Risk-Assessment, remediation, Governance

### Cybersecurity Engineer

[Bank of America](https://himalayas.app/companies/bank-of-america). Jun 2021 - Jul 2022

```text
Prioritized vulnerability findings using Tenable/Nessus, coordinated remediation with technology teams, and assessed security architecture for technology environments including AWS-hosted environments.
```

Skills: Tenable-Nessus, Vulnerability-Management, ServiceNow, AWS, Security-Architecture, Risk-Assessment

### GRC Analyst

United Health Group. Jan 2017 - May 2021

```text
Assessed third-party and internal technology risks against NIST-aligned controls and HIPAA requirements, evaluated vendor control environments, and governed remediation follow-up for identified findings.
```

Skills: GRC, NIST, HIPAA, SOC-1-SOC-2, Risk-Assessment, remediation, Audit-Readiness

## Education

### Ghana Institute of Management and Public Administration (GIMPA)

Master of Business Administration, Information Technology Networking

```text
Master of Business Administration in Information Technology Networking from GIMPA.
```

### Central University College

Bachelor of Science, Business Administration

```text
Bachelor of Science in Business Administration with a focus on Marketing.
```

## Tech stack

- Jira
- Microsoft Excel
- Power BI
- AWS

To contact Kwame, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Abdul Bamgbopa](https://himalayas.app/@abdulbamgbopa): Senior Third Party Cybersecurity Risk, TD Bank (Rovust LLC)
- [Ralph User](https://himalayas.app/@ralphuser): Security Risk Management Specialist, Fiserv
- [Patrice Assasie-Gyimah](https://himalayas.app/@patriceassasiegyimah): Principal Risk/Controls Manager, Capital One Financial
- [Kevin Ogie](https://himalayas.app/@kevinogie): Senior Third Party Risk Analyst, Wells Fargo Bank
- [Kevin Fallon](https://himalayas.app/@kevinfallon): Infrastructure Audit Manager, Amerihealth Caritas
- [Abdulfatai Ologun](https://himalayas.app/@abdulfataiologun): Senior Security Analyst, Milestone Technologies
- [Marco Valadez](https://himalayas.app/@marcovaladez): Technical Program Manager II, Motion Recruitment
- [Evelyn Koffi](https://himalayas.app/@evelynkoffi): Third Party Risk & Compliance Leader, TikTok U.S. Data Security
- [Beatrice NT](https://himalayas.app/@beatricent): Third Party Risk Analyst, Wells Fargo
- [Brent Hurlbert](https://himalayas.app/@brenthurlbert): Senior RCA Professional, Cyber Risk Oversight, U.S. Bank