Prudent, disciplined, and self-motivated with over 9.5 years of work experience in System and Compliance audit, Risk Management services, Compliance management including ISMS. Risk management based on systems classification assessment, threat & vulnerability analysis, process-based risk identifications and managing remediation plans. Seeking to obtain a challenging position in Network Security environment & looking forward to an exciting and challenging career with an organization that provides excellent working environment and opportunities and, I can contribute my best to the growth of an organization and which in turn will enhance my skills as well.

• Total 9.5 yrs. of work experience.
• Relevant 5.1 yrs. of experience as a Technical Specialist – Endpoint and remaining 3.9 years as an IT Production Support Engineer with GRC and Infosec management.
• Six months experience as a Site Engineer doing electrical project which having survey and maintenance.
• Compliance and business objectives integration into the operational processes.
• Design, development, and implementation of ISMS.
• Evidence oriented planning and decision, result oriented multiple team and stakeholder’s communication and collaboration.
• Worked for Implementation, operation, and maintenance of the Information Security Management System ISO 27001: 2013, SOC2 Audit, experience on solving Audit trails and CAPA Preparation, Conducting Information Security Committee (ISC) Meeting and Management Review Meeting (MRM) under ISMS, Information Security Awareness Campaign across the organization, Conducting interactive training session under ISMS quarterly for User Policies and Guidelines and new changes in policy and procedures.
• Experience on IT Risk Management – ISO 27001:2013, developing system evaluation program, GAP analysis, risk assessment, experience in Risk Assessment, Risk Treatment Plan, Threat & Vulnerability identification & control, User Policies and Guidelines, Compliance, Incident Management, Asset Management, Basic knowledge in Inventory management, Cloud services.
• Information Security Management System (ISO 27001) Audit and Assessment
• Initiating Nessus Scan and ensuring Closure of all the VAPT gaps as per ISMS timelines, Qradar Log Monitoring, TCP/IP Vulnerability Scanning for Servers, Applications, Middleware’s and Network devices – Nessus Tool, ID Revalidation - Continuous Business Need and Privilege Access Revalidation, Security Health Check for Server, Application, Middle wares and Network devices (Nipper Studio – All L2, L3, Internet Facing devices and IES devices), Firewall ACL Rule validation, Symantec Endpoint Protection Antivirus Management, WSUS Patch Management, Tape Reconciliation, Floor walk Audit, Security Inventory Validation tool, Technical specification Review for Server, Application, Middleware and Network devices including IT Security Standard Checklist, PCI-DSS Audit and worked on various Infosec Calendar Activities
• Experience on Symantec Endpoint Protection Manager, basic knowledge, and experience on Symantec DLP (Data Leakage Prevention)
• Hands on working knowledge on Fortinet Firewall – Log monitoring, basic knowledge on Checkpoint for blocking URL access to users.
• Managing Manage Engine Service Desk Ticketing Portal – Both Configuration and Implementation
• A self-motivated, responsible, and reliable team player with a set of strong technical skills.