Mar 2024 – Sep 2024 · 6 mos · Kolkata, West Bengal, India · On-site

• Risk and Compliance Consultant - UCO Bank NOC project
• Responsibilities includes compliance with PCI DSS, RBI Cyber risk framework, IS Audits.

Mar 2021 – Mar 2024 · 3 yrs · Noida, Uttar Pradesh, India

• Roles & Responsibilities:
• GRC and BCP/DR Consultant (Client facing) for the EMEA based clients (Power & Energy sector, Chemical sector, Retail sector) and reporting to Service Delivery Manager/Delivery Head of the respective projects.
• SOX Compliance: Responsible to support and facilitate the SOX Compliance Program as a part of GRC delivery for a client engagement. Timely completion of SOX compliance testing activities, timely identification, validation, and communication of control deficiencies, as well as the recommendation of remediation plans in collaboration with the process/control owners.
• Risk Management: Performed IT risk assessments to identify system threats, vulnerabilities and risks. Developed risk assessment reports and presented to the risk governance board for further actions on the risks identified during the assessments.
• Audit Management: As per the role, performed the internal audits (security baseline and contractual requirements) for all the tracks of the client engagement teams. Participated in the audits conducted by the Third party auditors (Big 4s) on client environment and point of contact for the scope of the operation activities delivered by HCL and responded to the assessments / control requirements.
• Third-party Risk Assessment: Conducted risk assessments for third-party suppliers/vendors who are deployed for the projects and documentation presented to the project leadership team of HCL.

Jan 2018 – Mar 2021 · 3 yrs 2 mos · Kolkata Area, India · On-site

• Roles & Responsibilities:
• Served as the organisation's Information Security Officer (ISO) and subject matter expert for information security requirements and reporting to CIO.
• Responsible for guiding and providing necessary documentation for an Information System through, completing & maintaining the Certification and Accreditation process for ISO 27001 and PCI DSS standards.
• Developed security documentation, including security policies, security procedures, business continuity plans and disaster recovery plans
• Risk Management: Performed IT risk assessments to identify system threats, vulnerabilities and risks. Developed risk assessment reports and presented to the Management for further actions on the risks identified during the assessments.
• Audit Management: As per the role, performed the internal audits (security baseline and contractual requirements) for all the tracks of the client engagement teams. Participated in the audits (as deputy CISO) conducted by the Third party auditors and responded to the assessments / control requirements.
• Third-party Risk Assessment: Conducted risk assessments for third-party suppliers/vendors who are deployed as a part of projects and delivery of the support services.

Nov 2016 – Jan 2018 · 1 yr 2 mos · Greater Chicago Area

• It Infrastructure Management
• Information Security Management
• Project Management

Sep 2015 – Nov 2016 · 1 yr 2 mos · West Bengal

• It Infrastructure Management
• Information Security
• Project Management

Nov 2013 – Sep 2015 · 1 yr 10 mos · Greater Kolkata Area

• It Infrastructure Management
• Information Security Management
• Project Management

Dec 2007 – Oct 2013 · 5 yrs 10 mos · Kolkata

• It Infrastructure Management
• Information Security Management
• Project Management

Jul 2006 – Dec 2007 · 1 yr 5 mos · Kolkata

• IT INFRASTRUCTURE MANAGEMENT
• PROJECT MANAGEMENT

Apr 2001 – Jul 2006 · 5 yrs 3 mos · Kolkata

• IT INFRASTRUCTURE MANAGEMENT
• PROJECT MANAGEMENT

Jan 1996 – Jan 1998 · 2 yrs · Greater Kolkata Area

• IT INFRASTRUCTURE MANAGEMENT