urwa mukhtar

At Capgemini, I lead Zurich Group's Third-Party Risk Management programme, independently managing 150+ global supplier assessments for banking and insurance. I serve as the liaison between the CISO office and external auditors and regulators, producing evidence packages and executive risk summaries.

I validate technical controls including firewall rules, IAM and SSO configurations, vulnerability scans, SIEM logs, and disaster recovery procedures against ISO 27001/17/18, NIS2, GDPR, and DORA. By coordinating remediation with suppliers and leadership, I've closed 70 to 80% of critical vendor findings within agreed timelines.

I also coordinate Generali's GOSP IAM Convergent Initiative across seven country workstreams, guiding milestones and dependencies across SailPoint IGA, CyberArk PAM, Microsoft Entra ID, and ServiceNow.

Previously, I completed 300+ cloud migration security assessments at Almaviva and reduced compliance gaps by 30% across 15+ client organisations at SAGE. I bring 8+ years of experience translating control evidence and security risk into clear action for technical, executive, audit, and regulatory stakeholders.