*Hi Partners,*
*Greetings,* *Hope you are doing Well!!!!!!!!!!!!!!!* *Please forward a profiles to **[email protected]* <[email protected]> *Here are the requirement details* *Eden Prairie* ------------------------------ *PROJECT:* Supporting UHC's accelerated approach for assessing high risk critical vendors *TEAM:* Reporting to the VISRA Team, the individual will act as a liaison & SME for internal departments & vendors to successfully perform Onsite Risk Assessments in USA. We leverage HITRUST CSF Version 7.0 for our program. *RESPONSIBILITIES:* - Perform and manage Onsite Risk Assessments as per process documents - Ensure vendor compliance to the business agreement, policies, procedures, & regulations along with ability to map controls and compliance requirements - Review vendor supplied policies & procedures, internal/external assessment reports, agreements and provide feedback - Provision assessment reports and executive summaries with recommendations & direction regarding remediation efforts and disposition of the third party - Communicate, escalate, and track vendor progress on assessment remediation activities - Act as a liaison & SME for internal departments & vendors to successfully manage Vendor Risk Assessment - Understand information security risks that are inherent to a business and articulate those risks in business terms - Maintain current knowledge on information security topics and their applicability program requirements - Engage VRO regarding any delays/deviations during remediation *TOOLS:* - Advance level experience in MS Word, MS Excel, and MS PowerPoint etc. *MUST HAVE:* - Experience working with senior levels of management - Good follow-up skills and detail oriented - Security expertise including knowledge on different security risk assessment frameworks (NIST/Octave), standards (ISO27001/HITRUST/ITIL/Cobit), and act such as (HIPAA/GLBA). - Experience in examining the SSAE 16 Audit report - Knowledge and understanding of different security products (web/email filtering, disk encryption, IDS/IPS, antivirus, DLP, firewall etc.) - Knowledge of software development methodologies, application security, and OWASP Top 10 guidelines - Ability to document assessment work papers and preparing assessment report - Ability to manage vendor assessment independently with minimal supervision - Strong Communication and Presentation Skills *NICE TO HAVE:* - Possess good project management skills *TRAVEL: * Up to 50% Looking forward to hearing from you at the earliest!!! *Regards* *Shankar* Professional Recruiter 33505 State Street, Suite # 200 Farmington, MI 48335 *V* (248)-522-6879 *F* (248)-579-4454 *Linkedin: **www.linkedin.com/in/shkrajan* <http://www.linkedin.com/in/shkrajan> *Email** : **[email protected]* <[email protected]> *Messanger**: [email protected] <[email protected]>* *Minority Certified and Woman Owned Enterprise* *TCI**- Technology Consultants inc* *Note:* *It is not a solicitation attempt!!!* -- You received this message because you are subscribed to the Google Groups "SAP ABAP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/sap-abap. For more options, visit https://groups.google.com/d/optout.
