seasoned technical and customer support professional specializing in , software support, technology risk management, encompassing areas such as GRC, Third party Risk, Vendor risk assessment, controls evaluation, IT audits, vendor contract management, and ongoing risk monitoring. My expertise includes analyzing and interpreting SOC 1, 2, and 3 reports, as well as various standards and frameworks such as ISO 27001, VSA, HIPAA, HITRUST CSF, ISO 22301, NIST 800-53, NIST Cybersecurity Framework (CSF), and CIS Critical Security Controls. I have a proven track record of assessing risks associated with service organizations, designing and implementing effective controls to mitigate these risks, and evaluating the design and operational effectiveness of key controls. I am a diligent team player, committed to fostering collaboration and enhancing operational efficiency through active engagement in team initiatives and shared responsibilities.More...