- ISO (27001, 9001, 14001, 45001), SOC 2 Type II - Implementation and Gap Analysis- Certification Audits and Training- IT, ITES and Cybersecurity Compliances- ICT Security and GRC frameworks

Providing External Audit Services as ad hoc basis for qualification continuity.Enlisted as a Sub-con Lead Auditor for following schemes:QHSE (ISO 9001, 14001, 45001) and ISMS - ISO/IEC 27001

• The job incumbent is responsible to conduct value added audits of the clients against the requirement of the ISO 9001(QMS), ISO 14001(EMS), ISO 45001(OHSAS), ISO 27001 Information Security Management System (ISMS) standard.• To conduct audits in accordance with ISO 19011, ISO 17021, Bureau Veritas Management System and BVC Operations Manual.• The position performs in line with the Bureau Veritas Quality Assurance System, including the BV Code of Ethics and the BV Group policy.• To keep self, updated with latest regulatory requirements & technologies pertaining to sectors/ schemes under audit. • To manage time effectively throughout entire audit cycle – From planning to reporting.• In the role as auditor (team member), to cooperate and coordinate with audit team leader during the audit.• In the role as lead auditor (team leader), manage the team in an effective manner. • To report / inform reporting line / back-office / team leader for any unexpected situation faced during the audit. (Examples – less time available for audit against planned due to situations beyond control, audit cancellation, any dispute during the audit on finding etc.) • To follow the schedules informed and confirmed by back-office/ client.• Qualification and up-gradation to other standards as identified and sector code qualification as applicable • Adherence to environmental and safety policies of our organization.

Partner and Vendor Risk management in a wide scope of Technology and Cybersecurity domains.

InfoSec projects Life-cycle management, Global team collaboration, Project tasks breakdown and clustering

Cybersecurity / Compliance:• Managing ISO 27001, ISO 9001, SOC2 Type II compliance audits defending and in-house trainings as CISO • Information security Risk Management, develop InfoSec Policies and SOPs that meets stakeholder’s requirements• Client’s technical SOW, MSA and TPS assessments during production teams new on-boarding and yearly review• Investigating the compliance breaches or incidents, reporting with root cause (RCA) and corrective actions (CA)• Technical work-flow deployment and frequent evaluation for efficient process management.Project Management:• Large scale migrations with efficient and well documented Change management process• User’s adaptation, awareness and training process planning for successful and delightful transition.Capacity (Resource) Management:• Overseeing departmental resources, assets, finances, including budgeting and forecasting for effective capacity vs demand management• Developing strategies and functional specs, work-flow diagrams, and use-cases to ensure 24/7 roster-based team management and their skills development by knowledge sharing and training culture.Global (Enterprise) Team Collaboration:• Strategic capacity planning, innovation in services and implement best practices for Secure InfoSec system design• Threat modelling and hunting for enterprise-wide resources (~1800) in BD, USA and EI-Salvador• Business continuity planning with all threats and impact analysis.IT Infrastructure Management:• Developing and overseeing Hybrid Data Centers (on-premise and cloud based) virtualization environment• Protect, secure, and safeguarding all IT assets (Software, Hardware and Data backups) inside the organization’s SaaS, IaaS platforms.IT Asset Management:• Overseeing all IT assets procurement, budgeting, vendor enlistments, their relationship and performance evaluation• IT Inventory assurance to the entire company employees and its concerns.

- Handle server installation, configuration & troubleshooting in VMWare ESXi based virtualization environment.- Administrating Linux (CentOS and Ubuntu), Windows (Server 2003, 2008) based servers and ensure their services.- NGINX, Apache, MySQL and PHP based servers setup and monitor performance for running applications.- Undertaking network fault investigations in-office Datacenter, ISP, bandwidth, routing for LAN and WAN environments.- Working closely with ISPs to ensure internet bandwidth & supplementary services at company H/O and branch offices. - Managing networking equipment i.e; switches, routers, wifi, access points for smooth day to day operation. - Monitor routing system along with server performance and implement performance tuning.- cPanel/WHM/Plesk, DNS, FTP, SSH based remote hosting servers maintenance and scheduling cron jobs if needed.- Windows Active Directory maintenance for imposing company's internet policies and data security.- Plans and supports networking and computing infrastructure.- Troubleshooting hardware & software related problems at workstations with co-operation of other IT team members.- Govt. BTRC licensing, approval and deployment of Multi-channel Call Center system- Work closely to identify, recommend, develop, implement cost-effective technology solutions for all aspects of the company.- Provides guidance and training for IT skills development to end users to eliminate recurring errors.

- LAN/WAN designing and maintain large scale networking architecture. - Managing several networking devices, ie; MikroTik, CISCO switches, routers, access points, VLAN understanding, firewall.- Working experience on Load balancing, bandwidth management, ISP service maintenance and user end internet services.- IP based devices (Access Control, CCTV, IP Printers) installation, maintenance and ensuring digital security.- VMWare/KVM based web / data-server management.- Working experience on ESXi, Virtualization, Big Data, Host-Guest server OS platforms.- Managing internal and external application upgrades, backup, security and confidentiality.- Certified knowledge of (Networking, System Administrating, PC Hardware, Server/OS, etc.)- Negotiating and Managing external vendors relationships and services.- Contracts with manufacturers for all software, hardware and consulting services for the company.- Extensive knowledge of E-commerce B2C and B2B development and managing all services relate with this business area.- Preparing and managing the operation to utilize resources and capital budgets for IT works.- IT hardware products knowledge as a savvy justifier and negotiator while sourcing assets for the company. - Carrying out new system facilitation, current system enhancements.- Strategic decision and planning to ensure IT services to all branches of the company.- Ensuring timely and accurate delivery of technology products and services to the departments.

- US giant MNCs and brands web development and maintenance with Joomla, Virtuemart, Magento, Wordpress.- CMS core customizations using PHP, mySql, Ajax, JavaScript, HTML, CSS. Later on test, debug and deploy inproduction/live and produce documentation.- Carrying out US office representative communications and project planning.