Looking for a job

Nishant Mehta

@nishantmehta

Third-Party Risk Management manager at Deloitte India, scaling enterprise TPRM and aligning risk assessments with DORA and PRA SS2/21.

India

Message

What I'm looking for

I’m seeking an AVP Third-Party Risk Management role where I can mature, scale, and operationalize enterprise TPRM frameworks, apply UK/EU regulatory alignment, and establish proactive first-line controls across global outsourcing engagements.

At Deloitte India, I lead a team delivering vendor and third-party risk management engagements, oversee project financials, and review client deliverables. I also optimized delivery workflows through process automation and resource allocation.

At PwC UK, I created a DORA RTS compliance tracker that mapped client policies and procedures to DORA requirements. I also conducted onsite third-party risk assessments across the UK and Europe and mapped regulatory requirements to the TPRM lifecycle.

Earlier at Ernst & Young LLP, I supported clients in developing TPRM programs and assessing vendor risks, and worked on application security and penetration testing projects. My experience also includes incident response and log analysis at HDFC Bank Limited.

Experience

Work history, roles, and key accomplishments

Current

Manager

Current

Deloitte India

Oct 2024 - Present (2 years)

Led a team of 15 to execute client engagements, ensuring adherence to Deloitte's Global Quality Standards. Managed project financials, optimized workflows, and mentored professionals to drive growth and efficiency.

Vendor Risk Management Third Party Risk Management ProcessUnity Smartsheet Airtable Agile Project Management Financial Management Quality Assurance Team Leadership Mentorship

Senior Associate

PwC UK

Feb 2023 - Oct 2024 (1 year 8 months)

Conducted over ten onsite risk assessments across the UK and Europe, demonstrating expertise in ISO 27001 and SOC 2 Type 2. Managed client projects, coordinated with global teams, and created a DORA RTS compliance tracker.

Vendor Risk Management Third Party Risk Management Salesforce Valorx ISO 27001 SOC2 DORA PRA SS2 21 ESMA RBI Guidelines Excel VBA Risk Assessment Project Management

Senior Consultant to Manager

Ernst & Young LLP

Sep 2022 - Feb 2023 (5 months)

Led a team of five professionals, maintaining strong client relationships and conducting weekly meetings to address process improvements and risk assessment status. Managed project trackers for APAC, NAR, and EMEA regions.

Vendor Risk Management Third Party Risk Management Archer KY3P SecurityScorecard ServiceNow Project Management Customer Relationship Management

Consultant to Senior Consultant

Ernst & Young LLP

Feb 2019 - Sep 2022 (3 years 7 months)

Assisted clients in developing third-party risk management programs and performed end-to-end vendor risk assessments. Collaborated with stakeholders to identify and mitigate risks, and provided training to new joiners.

Vendor Risk Management Third Party Risk Management Archer KY3P SecurityScorecard ServiceNow Risk Assessment Quality Review Stakeholder Management Training

Consultant

Ernst & Young LLP

Mar 2018 - Feb 2019 (11 months)

Worked on multiple Web, Network, and API Vulnerability Assessment & Penetration Testing (VAPT) projects for financial services clients. Created checklists and scripts to automate tasks and ensured adherence to industry security standards.

Application Security Vulnerability Assessment Penetration Testing Postman Veracode VAPT Web Security Network Security API Security

Associate Consultant

Ernst & Young LLP

Jul 2017 - Mar 2018 (8 months)

Conducted manual and automated assessments of web applications, mobile applications, and networks. Delivered comprehensive VAPT reports with proof of concept and mitigation methods.

Kali Linux Burp suite Nmap Nessus Metasploit MobSF Vulnerability Assessment Penetration Testing Web Application Security Mobile Security Network Security

Associate Trainee

Ernst & Young LLP

May 2017 - Jul 2017 (2 months)

Joined as a trainee in the Risk Advisory team, contributing to policy updates and mapping bank policies with regulatory requirements. Developed professional communication and technical documentation skills.

Policy Development Regulatory Compliance RBI Guidelines Technical Documentation Communication Skills

Security Analyst (Trainee)

HDFC Bank Limited

Aug 2016 - Jan 2017 (5 months)

Member of the Information Security Group handling threat intelligence and incident response. Worked on SIEM tool for log analysis, handled CERT-IN advisories, and performed email analysis on spam/phishing emails.

Incident Response Threat Intelligence QRadar SIEM Log Analysis Email Security CERT In