At Avalara, I conduct third-party security assessments for SaaS vendors and enterprise cloud service providers, validating controls against ISO 27001, ISO 42001, SOC 2, and NIST 800-53. I also maintain risk registers and monitor critical third-party integrations.
I developed an automated, multi-platform evidence collection toolkit integrating OFAC Sanctions Search, Qualys SSL Labs, and BitSight TPRM. It reduced processing time by 98%.
At Tata Consultancy Services, I conducted 80+ end-to-end third-party risk assessments, covering due diligence, risk analysis, and security control validation. I improved assessment accuracy through process improvements that reduced errors by 15%.
Across my TPRM work, I’ve supported vendor onboarding, remediation tracking, and compliance reporting, and trained staff on TPRM questionnaires and risk mitigation practices.
