Ashish Narayan Email & Phone Number

Dedicated to ensuring the security, compliance, and resilience of organizations' information systems, I am an accomplished ISMS (Information Security Management System) GRC (Governance, Risk, and Compliance) professional. With a robust background in SOC1/2, TPRM (Third-Party Risk Management), ITGC (IT General Controls), Gap Assessment, and a thorough understanding of NESA (National Electronic Security Authority), NCEMA (National Crisis & Emergency Management Authority), and NIST (National Institute of Standards and Technology) frameworks, I possess the expertise needed to enhance cybersecurity practices and mitigate risks effectively.My proficiency lies in managing end-to-end implementation and maintenance of ISMS frameworks, ensuring strict alignment with relevant standards and regulatory requirements. I have successfully executed numerous SOC1/2 engagements, supporting organizations in meeting their audit and compliance obligations.In addition to SOC1/2, I excel in TPRM, assisting organizations in establishing robust vendor risk management programs. I possess the ability to develop and implement tailored vendor risk assessment frameworks that cater to specific industries and regulatory environments.Moreover, my expertise extends to ITGC, enabling me to evaluate the effectiveness of IT controls, such as system access, change management, and segregation of duties.By identifying deficiencies in information security practices, policies, and procedures, I help organizations bridge these gaps, align with industry best practices, and achieve compliance with relevant frameworks and standards, including NESA, NCEMA, and NIST.As a collaborative professional, I excel in building strong partnerships with cross-functional teams and stakeholders. I communicate complex security and compliance concepts with clarity, providing clear guidance and recommendations to senior leadership. By driving the implementation of remediation measures, I foster a culture of security and risk awareness throughout organizations.I am dedicated to delivering exceptional results, equipping organizations with the tools and strategies to mitigate risks, protect sensitive information, and maintain a strong security posture in alignment with NESA, NCEMA, NIST, and other relevant frameworks.If you are seeking a dedicated ISMS GRC professional with expertise in SOC1/2, TPRM, ITGC, Gap Assessment, NESA, NCEMA, ISO 27001, ISO 22301 and NIST, I invite you to connect with me. Let's explore how my skills and experience can contribute to the success of your organization.

Listed skills include Information Security, Pci Dss, Isms, Network Security, and 18 others.