Feb 2016 – Present · 10 yrs 2 mos · Noida, Uttar Pradesh, India

• Implement the strategy, policy and working practice defined within the ISMS for the assigned client(s)/project(s).
• Manage compliance and Security Deliverables according to contractual obligations.
• Security Risk Management (utilizing risk assessment and risk treatment plan) as per ISO 27001:2022, GDPR, NIST, PCI-DSS Controls assessment.
• Manage & periodic Review of Role Based Access Control, Privilege Identity Management, Identity and Access Management.
• Manage threat and intelligence, management of scoping and delivery of security related information through Pen Testing, Vulnerability Management using SIEM tool Nessus & Qualys.
• Managing Security Incident throughout the Lifecycle.
• Plan and support internal / external audits and own remediation plan / tracker for mitigation. Well versed with Security & Compliance Frameworks such as ISO 27001:2022, GDPR, NIST, PCI-DSS.
• Manage and ensure operational patch and anti-virus compliance (ex. SEPM, Trend Micro, Microsoft Defender)
• Develop and manage security improvement process, security communications, Conduct Security Awareness Trainings.
• Develop and review security guidelines / policies and process and perform gap analyses.
• Review and analyses of all Security Reports like SOC, AV, Patch, Firewall and take corrective actions.
• Periodic Review & re-visit rule tuning for SOC, AV, Firewall.
• Produce and present Security KPI Dashboard to Stake holders.
• Matrix and Benchmarking of Security Deliverables and performance.

Feb 2014 – Jan 2016 · 1 yr 11 mos · Noida, Uttar Pradesh, India

• Spearheading the delivery of ITIL based Global Command Center from Off shore. Evolving and projecting Service Improvement Plans.
• Leading Team of 8 people, accountable for Service Delivery as per SLA in Shared Service Module for Remote Infrastructure Management (RIMS).
• Manage Incidents, Change and Problem through its full life cycle to a satisfactory resolution.
• Responsible for chairing weekly Incident, Change & Problem Meeting with Sopra Steria Stakeholders.
• Liaise with external third parties within a complex multi-supplier environment to facilitate prompt restoration of service.
• People Management responsibilities.
• Handling escalations and first point of contact for client.
• Chairing Weekly internal team meeting and providing updates.
• Quality Audit for all services and providing feedback to individual.