Archito Goswami

• Mentoring assessors in performing Third Party Risk Management (TPRM) assessments based on National Institute of Standards and Technology (NIST) Cybersecurity Framework. Conducted training sessions for clients and engagement teams on Archer GRC's TPRM and Issue Management modules, ensuring a thorough understanding of the platform's functionalities and workflows
• Assisting a Global client's enterprise risk management team in managing TPRM assessments pipeline and reporting to stakeholders. Additionally, conducted multiple meeting with Business stakeholders and Third-Party contacts to set up expectations for the TPRM program and process walkthroughs

• Assisted multiple Global Automobile Manufacturing clients in performing remote TPRM assessments in accordance with NIST Cybersecurity Framework. Conducted QA/QC reviews to ensure quality of reviews performed by engagement team members
• Led the team for client's third-party risk assessment process designing and User Acceptance Testing on RSA Archer's TPRM and Issue Management modules. Assisted client in streamlining the existing TPRM process to ensure proper documentation and quality of assessments

• Led the TPRM process for Insurance sector clients by performing on-site and remote assessments in accordance with the IRDAI guidelines and ISO's Information Security Management Systems ISMS) requirements
• Led weekly TPRM process performance and improvement discussions and dashboard presentations with client and associated business stakeholders

• Led a Role-Based Access Control (RBAC) and Segregation of Duties Rules (SOD) designing for trading and treasury applications (TI+ and T24) for one of the largest Bank in Middle East
• Assisted Banking, financial services and Insurance (BFSI) sector clients in conducting TPRM assessments by performing on-site and remote reviews in accordance with IRDAI guidelines and ISO's Information Security Management Systems ISMS) requirements
• Assisted engagement teams in performing IT General Controls (ITGCs) testing for clients
• Conducted assessment of systems and applications in accordance with SEBI's System Audit of Stockbrokers or Trading Members circular

• Assisted clients in performing data center audit as a part of the client's internal audit requirements
• Led RBAC and SOD designing for 12 critical applications used in the Insurance industry for one of the major Life Insurance providers in India
• Conducted reviews for application user access management controls and identified improvement areas in access creation, modification, and revocation processes