• Manage cloud platform vulnerabilities in AWS and GCP through Tenable.IO vulnerability scanning tool.• Engage with Product owners and cloud teams to remediate and provide end to end resolution for identified vulnerabilities.• Prepare security insight report to business based on vulnerability assessment.• Create and continually improve security policies and procedures.• Implement and manage a vulnerability management program that aligns with the organization’s risk appetite and security guidelines.• Drive continuous improvement in the vulnerability management process by leveraging industry-leading technologies and processes.• Manage internal PKI certificates for web servers with creating, revoking, and renewing the certificates

• Manage Third Party Cyber Risk through security assessment of all third parties to BNZ against industry standards (NIST/ISO) to protect BNZ information and systems and to be compliant with APRA CPS234• Engage with Product owners and external suppliers to facilitate discussions on security assessments• Prepare security evaluation report to business based on the assessment• Create, manage, and handle cyber security risks within BNZ• Perform vulnerability scanning using Rapid7 tool to discover and analyze vulnerabilities within BNZ networks, operating systems, other information system components• Work with business to provide end to end resolution for identified vulnerabilities• Create and continually improve security policies and procedures

• Understanding New Zealand Privacy Act 2020 and drafting requirements based on it that various organizations can use to redefine their privacy policy.• Performing external privacy assessment on various organizations in New Zealand and evaluated their compliance level with NZ Privacy Act 2020.• Creating report about the privacy policy of organizations based on the assessment.• Conducting security assessment of web applications using Burp Suite.

During my time at Cognizant, I had been working in a project to support the Norway based power company - Agder Energi. My roles and responsibilities included proactively monitoring and troubleshooting the LAN network and servers along with Application Support through Incident Management. I was working in a customer facing environment and did troubleshooting for any issues. I was also responsible for identifying and responding to any security issues and escalating complex issues to senior team members and resolve the issue.