Kelly Sok
32 Valera St, Dracut,MA
Summary
IT Security professional with experience in Third-Party Risk Assessment, SOC reviews and Compliance (ISO 27001:2013, SOX 404, HIPPA, SSAE 18, FISMA, NIST framework and PCI-DSS). Experience in audits, testing of security controls, and continuous system monitoring. Delivers high-quality service utilizing my high touch approach to guarantee integrity in my work
Overview
7
7
years of professional experience
1
1
Certification
Work History
External Party Risk Management
Sam's Club
11.2022 - Current
- Ensure vendor risk activities meet the requirements of the Third-Party Risk Policy.
- Provide Recommendations for security controls and confirms remediation of any deficiencies.
- Effectively communicate security needs and business requirements to stakeholders.
- Analyze, update and modify procedures and processes to identify and continuously implement vendor risk management process improvements to protect against emerging risks.
- Identify and examine nonconformities and vulnerabilities and work to mitigate and/or take corrective action.
Risk-Focused Analyst (Contractor)
Mercedes-Benz
02.2021 - 10.2022
- Classify third parties by risk level (low / medium / high).
- Maintain accurate records and compliance report.
- Conduct third-party Risk assessments (vendors, suppliers, agents, partners)
- Perform regular monitoring and analysis of data relating to third party audit findings.
- Implement and maintain components of a comprehensive 3rd party compliance program.
Information Security Analyst (Contractor)
Sovereign Bank
03.2019 - 05.2020
- Assist Management to identify, and maintain appropriate security and compliance measures.
- Manage annual IT Risk Assessments
- Develop and enforce security policies, standards and procedures.
- Measure and monitor Key Performance Indicators (KPI's) in order to effectively document and report to executive management about information technology risk and IT compliance
- Developing and maintaining cross-functional partnerships, and partnering with SMEs to determine appropriate risk-based remediation strategies
Education
High School Diploma -
Lowell High School- Diploma
Lowell, MA06-2008
Certificate - Medical Assistant
Lincoln Technical Institute
Lowell, MA07-2009
Skills
- Access/Identity Management
- IT Governance and Compliance
- Social Media Management
- Excellent Customer Service
- IT Risk Management
- Proficient in Microsoft Office and 365
- Team Management
Certification
Certified Information Systems Auditor (CISA) (Actively Pursuing)
Timeline
External Party Risk Management
Sam's Club
11.2022 - Current
Risk-Focused Analyst (Contractor)
Mercedes-Benz
02.2021 - 10.2022
Information Security Analyst (Contractor)
Sovereign Bank
03.2019 - 05.2020
High School Diploma -
Lowell High School- Diploma
Certificate - Medical Assistant
Lincoln Technical Institute