- Drive security projects - Cloud security strategy- Security architecture framework and processes- Security Architecture / Solution Design - Cloud security policy- Identify and assess security risks.- Define security control- Architecture Drawings and Documents- Application Security Review- DevSecOps Environments Architecture- Multi cloud strategy - Security Architecture for core banking and payment gateway (complex) applications - Resource management and Budget Planning

Risk and Controls Management: Mange the Technology Risk Landscape, by ensuring required Risk Control assessments are completed and Effective controls are being tested for effectiveness on a regular basis and ineffective controls are tracked for closure.Implement effective security controls into the environment following a risk based approach.In put into the development of the Global IT Risk methodology which will then be implemented into BBUEnsure all key stakeholders understand and buy in to the IT Risk Controls Framework .Ensure technical security solutions are designed and included into key developmentsEnsure that security risks in applications and systems are understood and mitigating controls are in place.Providing technical risk assessment data for local business owners to translate into business risk terms, and on which to base business risk decisionsGovernance and Audit Assurance: Regulatory Attestation - Review issues provided by UK Governance, consider and declare additional issues; Provide current state assessments; Manage CIBULS/CIGLS local actions; Provide business unit attestations.Management Assurance - Assist with defining the scope for controls assurance reviews.Policy Management - Ensure all appropriate technology staff are aware of the new policy approval process and the policies which directly affect them; Review and advise on any policy non-compliance.Closure Assurance - Provide an initial review of audit closure evidence and RCA final action closure evidence. Manage and track locally owned Audit actions.Provide consultancy, advice and guidance on Information Security to both business and technology management.Liaise with both Internal and external Audit groups on technology risk and control issuesLiaise with external industry and government groups to keep abreast of new security threats and initiatives.Leverage ideas, solutions, remediation plans and security activities with other country IT Risk management system.

Architect, Design and Implementation security devices and process for indecent investigation, vulnerability testing and remediationSME for security productsMaintaining company policies and procedures governing corporate security, email and Internet usage, access control, and incident response.Develop new process, work flow diagrams and work instructions as per project need

Web Application Vulnerabilities, Penetration Testing Methodologies, Log monitors, Log Management and Log correlation to understand the attack, Worked onSecurity Devices, Capable of keeping network clean and attack proofSecurity infrastructure implantation/upgrades (e.g.,firewall/VPN, intrusion detection, content filters and remote management)for various midsize and large projects.Design hierarchical network structures and implement security over network devices according to the organization standard/requirement

Provided technical support, Motivated and supervised engineers on daily basis in a 24/7 environment, Maintained excellent customer relations and developed customer rapport, Diplomatically resolved customers complaints on as-needed basis,Accomplishes organization goals by accepting ownership for accomplishing new requests