مانيشا أبراهام

• Performing cyber security due diligence for mergers and acquisitions
• Proactively assist in the management of several clients, while reporting to Managers and above
• Train and lead staff
• Establish effective working relationship directly with clients
• Contribute to the development of the team’s technical acumen
• Be actively involved in business development activities to help identify and research opportunities on new/existing clients

Decsription
•Audited the

Engage with LOB (Line of Businesses) Delivery Managers to ensure compliance with all required assessments per the company policy and procedures.

Drive all aspects of the risk assessment of third party providers.

Engage Line of Businesses (LOBs) that use the third party in terms of risk management.

Assess completed questionnaire and supporting field work materials to ensure they are complete and meet JPMC expectations.

Assist the onsite/ remote assessment, providing the overall IT Risk expertise.

Identify control breaks and vulnerabilities with a third party.

Document findings and work with the LOB Delivery Manager to resolve those findings through Remediation Plans (RPs) or seek Non- Compliance Acceptance (NCA) approvals.


Escalate issues associated with third parties as needed

Manage the Shared Service Quality Assurance team and work with the global assessor teams to ensure that the remediation plans (RP)/ non compliance acceptances (NCA) are reviewed and feedback is provided to the assessors

To have thefinalized RPs / NCAs appropriately included / updated in risk systems andmetrices

To ensure that the relevant and sufficient evidence are reviewed for the purpose of closure ofany RPs / NCAs and regular reporting of open RPs and NCAs

Validate evidence from third party, before Remediation Plans are closed

Assist with various Third Party Risk Management program initiatives working closely with the Third Party RiskManagement Leads.

Support internal education and best practices sharing with peers and colleagues, as well as third party education & awareness as needed

Decsription
Provided Testing environment support which involved daily health checks and communicating the status report to all stake holders, Performed pre requisites for NFT, assistance during RDL, deployments on unix boxes

Provided End to End monitoring of around 12000 Unix and Windows servers and network devices such as Routers, Switches as well as creating custom policies for URL, Port, Service, Process, Logfile monitors in Sitescope Application and monitoring 30 Business Critical Applications(Top Apps)