Open to opportunities

Patrice Assasie-Gyimah

@patriceassasiegyimah

Message

Results-oriented TPRM professional with expertise in vendor risk management.

United States

Message

What I'm looking for

I am looking for a role that offers opportunities for growth, a collaborative environment, and the chance to make a significant impact on risk management strategies.

I am a results-oriented Third-Party Risk Management (TPRM) professional with over 7 years of experience navigating the full TPRM lifecycle. My expertise lies in vendor risk management, conducting comprehensive security assessments, and driving robust third-party oversight to protect organizational assets and ensure regulatory compliance. I excel at identifying, assessing, and mitigating risks associated with external partnerships to foster secure and resilient business operations.

In my current role as Principal Risk/Controls Manager at Capital One Financial, I ensure thorough risk assessments for all third-party vendors and collaborate with cross-functional departments to improve customer experience. I have led independent security reviews across multiple IT systems, supported audits, and provided detailed reports of assessments to business owners. My previous roles have equipped me with a strong foundation in compliance analysis and risk mitigation, allowing me to effectively manage vendor relationships and uphold security standards.

Experience

Work history, roles, and key accomplishments

Current

Principal Risk/Controls Manager

Current

Capital One Financial

Apr 2024 - Present (1 year 8 months)

Ensured thorough risk assessments for all third-party vendors, ensuring compliance and regulatory audit obligations. Collaborated with cross-functional departments within Security, Procurement, and Legal on process improvements and workflow integrations to provide improved customer experience.

Risk Assessment Regulatory Compliance Cross Functional Collaboration Process Improvement Security Reviews Jira

SR IT Third Party Risk Analyst

GoHealth

Dec 2022 - Present (3 years)

Led third-party risk assessments, ensuring compliance with global data protection regulations. Translated technical security concepts for legal, sales, and marketing teams during contract reviews.

Data Protection Technical Security RSA Archer Vendor Categorization Customer Audits Security Services

Cyber Security Risk / Third Party Risk

US Bank

Aug 2021 - Present (4 years 4 months)

Led internal audits, conducted risk self-assessments, and fortified security controls for early risk detection. Conducted in-depth third-party risk assessments, vendor reviews, and controls testing.

Internal Audit Controls Testing Risk Mitigation

Security Control Assessor/Vendor Relations

FORVIS

May 2019 - Present (6 years 7 months)

Conducted in-depth risk-based security assessments of housed, cloud, vendor, and third-party hosted environments, assessing risks. Evaluated and monitored procedures and internal controls for physical security over data centers and computer operations, network communications, database management systems, change management overall IT areas, and operating system security.