Third-Party Risk Management & Cyber Compliance Leader

CHOSNIEL SANJI

Princeton, TX *********@*****.*** 240-***-****

PROFESSIONAL SUMMARY

Third-Party Risk Management (TPRM) and Vendor Risk professional with 9+ years strengthening cybersecurity, GRC, and vendor risk programs across financial services and telecommunications organizations. Experienced across the full TPRM lifecycle, vendor tiering and portfolio management, inherent and residual risk assessment, business impact analysis (BIA) alignment, single-point-of-failure (SPOF) risk treatment, vendor incident response, and issue management through remediation and closure, aligned to SOC 2, NIST, and ISO 27001 frameworks. Skilled at partnering with Procurement, Business Continuity, Legal, and Information Security to reduce vendor exposure and at translating control gaps and residual risk into clear, actionable reporting for domain reviewers and executive stakeholders. Comfortable working alongside automated risk-scoring and assessment tools, contributing to calibration, error analysis, and output quality review. Certified PMP, CSM, SAFe® 5.0 SPC, CISSP, and CRMP, with a Harvard Certificate in Cybersecurity & Risk Management.

CORE COMPETENCIES

Third-Party Risk Management (TPRM) Vendor Tiering & Portfolio Management Business Impact Analysis (BIA) Alignment

Single Point of Failure (SPOF) Risk Treatment Vendor Exit & Failover Planning Inherent & Residual Risk Assessment

Vulnerability Management & Remediation Data Loss Prevention (DLP) Program Oversight KPI / KRI Reporting

SOC 2, NIST & ISO 27001 Compliance Control Design & Effectiveness Testing IT Audit & Controls Testing

Risk Assessment Tool Calibration & QA GRC Program Governance Stakeholder & Cross-Functional Collaboration

PROFESSIONAL EXPERIENCE

T-Mobile Third-Party Vendor Risk Manager / Compliance Lead

Frisco, TX 2023 – Present

Lead third-party risk management and compliance initiatives supporting large-scale technology modernization programs, ensuring vendor solutions meet enterprise security and regulatory requirements.

•Conduct comprehensive third-party risk assessments, evaluating vendor security controls, compliance posture, and operational risks.

•Maintain vendor risk tiering aligned to business impact and criticality, supporting portfolio-level KPI/KRI reporting for executive stakeholders.

•Review SOC 2 Type 2 reports, audit findings, and security documentation to identify control gaps and ensure adherence to organizational standards.

•Partner with internal audit, security, and legal teams to ensure vendor compliance with NIST, ISO 27001, and internal policies.

•Manage vendor risk lifecycle, including onboarding, due diligence, ongoing monitoring, and remediation tracking.

•Develop and maintain risk reports, dashboards, and executive summaries to support decision-making and audit readiness.

•Collaborate with cross-functional teams to address control deficiencies and implement corrective actions.

Verizon Wireless IT Audit & Compliance Manager / Risk Analyst

New York, NY 2021 – 2022

Directed IT audit and compliance activities across multiple technology domains, ensuring effective control environments and regulatory adherence.

•Performed IT control testing and audit procedures across systems, applications, and infrastructure environments.

•Evaluated control effectiveness and documented audit findings, risks, and recommendations.

•Supported SOC 2 readiness initiatives by assessing control design and identifying compliance gaps.

•Collaborated with engineering, QA, and DevOps teams to remediate audit findings and strengthen control environments.

•Developed audit documentation, reports, and risk assessments to support internal and external audits.

•Improved audit efficiency and reduced delays by 25% through streamlined processes and enhanced reporting.

Hartford Financial Services GRC Specialist (Governance, Risk & Compliance)

Hartford, CT 2018 – 2021

Led governance, risk, and compliance initiatives with a focus on strengthening control environments, ensuring regulatory alignment, and enhancing organizational risk posture across enterprise systems and processes.

•Conducted comprehensive risk assessments and control evaluations aligned with frameworks such as SOC 2, NIST, and ISO 27001, ensuring effective design and operational effectiveness of controls.

•Managed governance processes by developing, maintaining, and enforcing policies, standards, and procedures to support regulatory and internal compliance requirements.

•Identified control gaps, risk exposures, and compliance deficiencies, partnering with stakeholders to implement remediation plans and track progress to resolution.

•Supported audit readiness by maintaining accurate documentation, evidence collection, and control mapping for internal and external audits.

•Monitored ongoing compliance through continuous control assessments and risk tracking, improving overall control maturity and organizational resilience.

•Collaborated with cross-functional teams, including Information Security, Legal, Audit, and Business Units, to ensure consistent application of governance and risk management practices.

•Maintained risk registers, issue logs, and compliance dashboards to provide visibility into risk posture and support executive reporting.

•Drove process improvements and standardization efforts to enhance efficiency in risk assessments and compliance activities.

Fidelity Investments Vendor Risk Analyst & Service Delivery Coordinator

Boston, MA 2017 – 2018

•Administered specialized assessments and testing lifecycles for business processes, ensuring vendor compliance with service level agreements and operational effectiveness standards.

•Identified and addressed potential service delivery risks, providing actionable insights to improve vendor performance and mitigate operational disruptions.

•Contributed to the development and standardization of vendor management policies, procedures, and performance management frameworks.

•Collaborated with internal stakeholders to strengthen vendor management processes, enhance service delivery satisfaction, and improve compliance oversight.

•Prepared detailed performance assessment reports, trend analyses, and remediation plans for management review and strategic decision-making.

EDUCATION

Bachelor of Science in Computer Science University of Buea, Cameroon

Advanced Diploma in Marketing & Public Relations Institute of Commercial Management, Bournemouth, England

TECHNICAL SKILLS

Microsoft Office Suite (Word, Excel, PowerPoint, Project, Visio, Teams, SharePoint) GRC & Risk Tools: RSA Archer, MetricStream, OneTrust, ServiceNow GRC Vulnerability Management: Qualys, Tenable Nessus, Rapid7 DLP: Symantec DLP, Microsoft Purview, Forcepoint Monitoring: SIEM (Splunk, IBM QRadar, ArcSight) Assessment Tools: Prevalent, ProcessUnity, Resolver, Lockpath Audit & Compliance: SOC 2, NIST CSF, ISO 27001, ITGC, Risk Registers Data & Reporting: Power BI, Tableau, Excel, SQL Collaboration: Jira, Confluence, Slack, Microsoft Teams Cloud & Security: Azure, AWS (basic), Splunk SOAR

CERTIFICATIONS

• Project Management Professional (PMP) – PMI

• Certified ScrumMaster (CSM) – Scrum Alliance

• SAFe® 5.0 Program Consultant (SPC) – Scaled Agile Framework

• Certified Information Systems Security Professional (CISSP)

• Certified Risk Management Professional (CRMP)

• CompTIA Security+

• Certificate in Cybersecurity & Risk Management – Harvard University

Contact this candidate