Jan 2015 – Jul 2018 · 3 yrs 6 mos · Navi Mumbai, India

• As part of the Cyber Security practice in Happiest Minds, I have operated under multiple roles right from Team Manager, Project Lead, Lead Auditor, Security Architect to Pre-sales Consultant. Under each of these roles I was responsible for ensuring delivery, assessing the security controls/solutions, redesigning the network architecture, providing RISK identified to mitigating solutions, pre-sales consultancy services, technical advisory and responding to bids followed by proposal writing.
• Key roles handled:
• 1) Architect - SIEM integration (Application Integration/ Telco Device Integration/ Log Analysis / Parser writing)
• 2) Network Security Architecture Assessment
• 3) Network Device Configuration Review and Audit
• 4) IT Security Audit and Assessment
• 5) Technology Risk Management
• 6) Build Operate Transfer - setting up technology and teams
• 7) Information Security Consulting - Network Security Devices.
• Industry wise Projects Delivered :
• 1) Sanctum Wealth Management - IT Security Assessment, ISMS Gap Assessment
• 2) Damac LLC, Dubai - Network Security Architecture Review
• 3) Future Group - IT Security Assessment, Network Security Architecture Review
• 4) Network 18 - ISMS Gap Assessment
• 5) Reliance Jio - SIEM: Integration, Log Analysis, Parser Writing, Rule Development

Jul 2014 – Jan 2015 · 6 mos · Goregaon, Mumbai, India

• AVP - Information Security
• Define and create RISK METRICS based on the incidents discovered.
• Preparation of Audit and Compliance requirement documents as and when required by the Internal and External audit team.
• Secure network architecture designing to setup new and existing appliances and bringing them into Business and Usual Operations.
• Preparing the Risk Register showcasing the enterprise security health to the CIO, CISO and CTO.
• Preparing monthly vulnerability and risk dashboards for business and IT discussion showing the risk in the environment.
• Creation of Key Operating Procedures and Key Process Instructions for aligning the team activities and operations.
• Incident Investigations which involve high profile users.
• Reviewing and approving request for restricted website access including compliance monitoring of high privilege access.
• Carrying out Information Security Training and awareness session for new joiners and refresher courses.
• Conducting team activities like performance management, team health, compensation allowance etc.
• Creating shift activities, operation schedules incident trackers and templates.
• Managing inter team discussions and actionable within the team and other departments.

Aug 2010 – Jul 2014 · 3 yrs 11 mos · Lower Parel, Mumbai

• Technology Risk Management,
• Evaluating security products/solutions/services,
• Biometric Designing and Security Control,
• Vendor shortlisting/negotiations/engagement,
• Compliance and Audit checks based on ISO 27001
• Process Risk Assessment,
• Secure Solution Designing,
• Vendor Management,
• Technology controls audit, IT Health Check.
• Bid/Tender replies/providing information security details/facts/figures.
• Service budget management,
• Strategic consulting between business divisions.
• System migration: planning and execution.
• BCP controller and management.
• Onsite audits (SE Asia, North Africa, Middle East, Canada, Asia)
• Technical Side:
• Symantec Data Leak Prevention
• Symantec End Point Protection
• Symantec Web Gateway
• Intrusion Prevention and Detection System (IBM ISS)
• Malware Monitoring
• Application Security Testing
• Bot detection and analysis
• Firewall Management and Policy Designing
• Phishing Domains Detections and Take Down
• Process and Compliance:
• ISO 27001 Implementation and Audits
• ITIL Implementations
• GRC
• Process flow designing
• Data Flow Analysis
• Firewall Rule Base Audits and Recertification
• IT Health Check Compliance Register
• Risk Register for system compliance and risk
• Conducted ISO 27001 audit across international location as an Internal Auditor and also with an external certifying body. Audit conducts in countries across South East Asia, Middle East covering Morocco, Russia, Turkey, Canada, France, Germany.
• Representing VFS Information Security for Information Security,Biometrics Security design and deployment,Data Center audit visit with the Citizenship and Immigration Canada Govt and Canadian Governments Public Works Division.
• Played a key role in designing and implementing the Information Security controls and requirements for the Canadian Ministry pre and post bid winning.
• Conducted compliance and security audits for the VFS Biometric setup in Morocco for the Spain Ministry.

Sep 2007 – Aug 2010 · 2 yrs 11 mos · Saikinaka, Andheri-Kurla Road, Andheri East, Mumbai

• Firewall Risk Assessment and Governance
• Firewall rule base review across geo regions
• Rules database migration.
• Firewall Recertification
• Developing Geo Region wise Risk Dashboards
• Security Architecture Design and Implementation (US Onsite)
• Firewall Rules Review and Approval
• Architecture Designing
• Business/Technology Stakeholder management
• o Manage overall relationship with global security and technology contacts.
• o Interaction and response to system/firewall administrators for queries raised by them.
• o Risk resolution discussion and training client on raising firewall request.
• o Risk assessment discussion with security team/firewall teams.

Aug 2006 – Aug 2007 · 1 yr · Mahalakshmi, Mumbai

• Network Security Engg
• Firewall Administration, VPN Administration Iron port switch administration
• Setting up overseas Bank Branch secure connectivity
• IPS Implementation and Administration (ISS Real Secure)
• Vulnerability Assessment using various tools (Nessus, Nmap)
• Information Security Auditing