• Lead ISO and SOC 2 External Audit.• Managed and Maintained Audit Scope, SoA, Risk Register.• Closely work with all External and Internal Audit Stakeholders, Leaders for smooth Audit• Establishing Security best practice, Governance, Policy and Procedures for day to day Security Operations• Responsible for Managing Security Scores Management via BitSight, Security Scorecard.• Designing and implementing IT Security Controls, procedures & standards, Information Security (IS) structure, especially regarding logging of security events and the security risk mitigation controls• Closely working with SOC team to and provide guidance on Security issues those they report to L2 team members.• Endpoint Security.• Managing Enterprise Risk in GRC Tool.• Review yearly ISMS Policies and update them as per findings in Audits.• Firewall Audit with Nipper.• Managing Corporate wide Security trainings and Compliance.

• Establishing Security Operations, Security Engineering and Security Professional Services Team• Executing security analysis of organization’s policies & procedures to ensure compliance with applicable standards, identifying areas of improvement for finding remediation• Designing and implementing IT Security Controls, procedures & standards, Information Security (IS) structure, especially regarding logging of security events and the security risk mitigation controls• Managing resources in SOC with regards to detection, response, mitigation, and reporting of cyber threats • Ensuring compliance to SLA, process adherence and process improvisation to achieve operational objectives• Streamlining processes to strengthen the existing security controls• Evaluating operations framework, policies and highlighting the challenges in managing SLAs• Administering the team and initiating corrective action where required for Security Operations Centre• Generating reports, dashboards, metrics for SOC operations and presenting the same to Management• Formulating & supporting strategic plans and projects to meet SOC goals & objectives

Azure Security, MFA, DNS, Digicert PKI, Endpoint Management Symantec AV and Cisco AMP, Cisco Umbrella, Audits - SOC 2, Cyber Essentials, HIPPA.• Administered Symantec & Antivirus, Deployment, Antivirus Definition Updates and Reports• Analysed Cisco AMP Events with Security Operations Team (SOC)• Maintained Antivirus compliance and ensured all systems were updated & scanned on a regular basis• Performed virus clean-up, reviewed virus attack on corporate systems, and provided monthly report for Antivirus Status for Corporate Systems to Management• Executed Nessus Vulnerability Scanning and Server Patching; presented reports to management on Server Vulnerability & Status on monthly basis• Managed PKI Certificates, Creation of Certs from DigiCert, Installation• Conducted SOC Audit & Quarterly Audit for Antivirus Management, Active Directory, Multifactor Authentication; addressed & resolved auditor query and provided them reports / proof• Ensured adherence to IT ACT 2000 and compliance for Internal Audit• Monitored NetIQ, SCOM Alert for servers• Supervised Azure DNS, Azure SPN, Azure IAM for different subscriptions and Azure AD Audits: HIPPA, HITRUST, & On/Off Boarding Audits• Focused on L1 Task Delegation to Security Operation Team for monitoring tools and company infrastructure• Delivered training to SOC Team and developed Knowledge Documents & Quick Reference Cards for user education