Results- oriented IT Third-party risk analyst professional with 4 years of experience performing IT audit. Vendor/third-party risk assessments and security control assessments. Application controls (ITGC) SSAE18,(SOC1,2). Attention of compliance with deep knowledge of standardized information gathering (SIG) ISO 2700001.SSAE18,NIST 800-53, NIST800-37, PCI-DSS to achieve security. Confidentiality, processing integrity, Availability of information systems and privacy.