Ashwin B Email & Phone Number

Aurora, Il, Us

Texas, United States

Newtown, Pa, Us

• Conduct vendor risk assessments to identify potential risks by implementing the repeatable and verifiable risk assessment framework.• Developing several detailed summary reports, trend analysis reports and sub reports according to business requirements using Microsoft Power BI • Implementation and continuous support of Multi Factor Authentication across Laureate Institutions.• Conduct internal audits on Databases of SOX applications against CIS standards to ensure compliance.• Develop and implement best security standards and security enhancements.• Collaborate and support regional owners to achieve project goals.

Memphis, Tn, Us

• Provide expertise on system performance tuning, capacity planning, and maintenance patching and new version installation.• Validate data has been copied successfully.• Decommission legacy managed disks.• Perform data migrations for Relativity customers from legacy managed disk storage into ADLS.• Assist clients to monitor all software implementation lifecycle and assist make appropriate customization to all software for clients.• Experience in configuring and maintaining Windows server systems/Windows Administration experience (2016 / 2019).• VMWare.ESXi Administration experience in an environment.• Expertise with Active Directory administration and support experience.• Experience remediating vulnerabilities / hardening.• Design services in accordance with client standards and vendor best practices.• Develop and maintain standard templates for repeatable build outs.• Helped in setting up Logic Monitor tool for monitoring server health and report and issues.• Assigning/updating memberships in Active directory, provisioning user accounts, setting user permissions on file, folders/shares.• Experience in migrating SharePoint applications from on premises to SharePoint online/cloud using Content Matrix tool.• Design and Review• Specification • Information Protection and Industrial Network Security• Programming and Development• Field Commissioning • Life Cycle support and maintenance • Training

• Perform Enterprise Risk Assessments (ERA) using IT security and business controls based out of various regulatory frameworks viz. FFIEC, PCI, GLBA, NIST, ISO 27001 etc.• Perform regulatory standards compliance driven IT Risk Assessments / Asset Risk Assessment (ARA).• Involved in extensive Vendor / Supplier Risk Assessment using ISO 27001/27002 Audit Framework and vendor review regulations.• Involved in implementation and governance of a secure SDLC / Application Development closely aligned with the Microsoft SDL and OWASP secure coding guidelines, liaising extensively with R&D Teams.• Liaising with Big 4 Auditing firms for providing evidences of IT general controls leading towards the creation of SSAE 16 (SOC 2) reports.• Governance, Risk and Compliance (GRC) tools used: Agiliance Risk Vision.• Led efforts to streamline, develop, and enhance third party risk management methodology.• Follow up to ensure that risk mitigation action plans are implemented by agreed target dates.• Provide effective tracking, following-up on the findings and management reporting in order to enable identification and prioritization of issues, ensure remediation action plan are in place to meet commitments and to continuously review risk issues and control gaps to identify trends.• Collection and review of standard legal and security artifacts pertaining to Information security policies, procedures, audit reports, network topology and vendor contracts.• Provision assessment reports and executive summaries with recommendations and direction regarding remediation effort and disposition of the vendor / third party.

Armonk, New York, Ny, Us

Understanding Information Security Management Systems. Ensuring System Compliance,Audit and Security assessments for IBM clients by conducting security scans for projects and hold security reviews against internal or external solutions being developed or maintained.• Experience in web application testing based on the OWASP, NIST and SANNS standards.• Ensured all the security controls implemented by performing audits and gap analyses in accordance with the company’s security.• Experience in Security, Risk & Compliance Management • Experience in Change, Problem and Incident Management as per ITIL framework.• Strong Experience in Security Health Check, Patch & Vulnerability management.• Experience working on global teams across time zones, cultures, and languages• Experience with internal and external audits(SSAE16, SOX)• Experience in continuous monitoring support for Servers, databases and Web applications• Experience in Security Document Refresh projects.• Defining Policies and Ensuring relevant process/procedures are adopted by the teams.• Driving the IT Governance in order to address the Gaps and Improvements relevant to organization growth.• Experience in network scanning using NMAP, Nessus and Configuring Compliance tools ( IEM, VSA, fusion )• Handling SOC alerts for PUMA(Privilege User Monitoring Alert) for Security incidents on client servers.• Knowledge in preparing SOP’s and prevention plans for RCA.• Followed up on remediation activities to ensure identified risk are mitigated within required timeframes• Assist in preparation of metrics and reporting for vulnerability management activities and health check scans.• Collaborate with IT management, compliance, and vendors to manage security vulnerabilities• Lead in driving many transitions accounts to steady state accounts.

New York, Ny, Us

• SME L3 Support for GE GIS (Global Infrastructure Services) on various security practices such asSafeboot/McAfee, Antivirus, Qualys, Sophos AV/FW & NAC, IPS, IDS, WSUS, and Mozy PC Backup.• Monitoring and auditing GE Servers and clients for incidents such as virus and patching up with latest update and patterns.• Performing Risk analysis and providing risk mitigation plans on 24/7 basis across three poles Americas, EMEA and APAC.• Participating in Security Steering committee calls I.e., Management review of all Security projects.• Conducting Data Classification and GDC compliance audits internally.• Perform schedule and on-demand scans using Qualys Guard to trace out vulnerabilities based on business requirements and share the scan report to respective business units.• Implementing and Administering Sophos Anti-virus and Firewall Suite.• Implementation and administrating data loss prevention (DLP), Intrusion detection system, Intrusionprevention system.• Configuring stringent antivirus policies to minimize malware risks and spreading.• Release management to the entire GE clients with new virus definitions and it also includes versionupgrades.• Network Access Control tools such as SOPHOS NAC Implementation and deployment across GE machines and timely control of the policy changes and periodic updates of policy changes.• In case of any emergency/Severity-1 issues, coordinating the efforts with the business leads and other related teams to mitigate the risk.• Use of Wireshark and Nmap tools to scan the networks and capture the network logs in order to analyze.• Partially responsible for Problem management for RCA (Root Cause Analysis) and RCCA (Root Cause and Corrective Action) of outages.• Train L1, L2 Support Teams & Onsite Engineers & Mentoring the new agents.• Prepared SOP’s required for the projects.

Bachelor'S Degree, Computer Science

Master'S Degree, Computer And Information Systems Security/Information Assurance