Information Security areas where I have worked in a consultant, assessor, auditor or a pre-sales role:1. Cybersecurity Product Management - Assessment framework development, mapping and management2. Supplier Assurance Assessments - both onsite and remote3. Risk/Issue Management4. Vendor Risk Governance - program and framework development5. ISMS Maturity Assessment - ISO/IEC 27001:2013; Gap assessment 6. BCMS Maturity Assessment - ISO 22301:2012; Gap assessment 7. Risk and Control Assessments based on NIST SP 800-53, NIST CSF and ISO 270018. Application Security reviews based on SANS and OWASP9. Cyber SME consultation - Contract negotiation, remediation testing, data transfer agreement review.10. Cloud security Control Assessment based on CCM and CAIQ11. Quality Review - Assessment service12. GRC - Privacy and Information SecurityPlatforms/tools utilized:a. RSA Archer, Sprinto- GRCb. ServiceNow - Issue managementc. Power BI - visualization/dashboardsd. MS Officee. Process Unityf. TPRM platforms - CyberGRX, KY3P, Trusightg. SIG - assessment questionnaire