CISA, ISO Certified Information Security & Compliance Professional | 10+ Years of Expertise**Dedicated and results-driven Information Security professional with over 10 years of experience in ISO-based Internal Audit, IT General Controls (ITGC) Audit, SOC 2 Compliance, Third-Party Risk Management (TPRM), and Information Security Risk & Compliance. Possessing a strong background in ISO 27001 (Lead Auditor) and ISO 31000 (Risk Management Standard), I am passionate about ensuring robust cybersecurity practices and regulatory compliance within organizations.Key Expertise:Third-Party Risk Management (TPRM): Extensive experience in evaluating and managing third-party risks, establishing comprehensive TPRM frameworks, and fostering secure vendor ecosystems.Information Security Governance: Adept at establishing Information Security governance structures, policies, and procedures to safeguard sensitive data and intellectual assets.ISO 27001 (LA) Certified:Proven expertise in implementing, managing, and auditing Information Security Management Systems (ISMS) based on ISO 27001 standards.ITGC Audit & SOC 2 Compliance: Proficient in conducting IT General Controls (ITGC) audits and driving SOC 2 compliance initiatives, ensuring adherence to industry-leading standards.Risk Management & Compliance: Skilled in developing and implementing risk management frameworks, aligning organizational processes with ISO 31000 Risk Management Standard, and ensuring compliance with regulatory requirements.Professional Achievements:Successfully led ISO 27001 certification initiatives for multiple organizations, ensuring alignment with international Information Security standards.Implemented robust TPRM frameworks, mitigating risks associated with third-party relationships and enhancing overall vendor security.Played a pivotal role in SOC 2 compliance projects, ensuring seamless audits and validation of security controls and practices.Developed and conducted customized training programs, enhancing organizational awareness of Information Security best practices and compliance requirements.Certifications:Certified Information Systems Auditor (CISA)ISO 27001 (Lead Auditor)ISO 31000 (Risk Management Standard)PCI DSS 4.0 implementorITIL FoundationMCPLet’s Connect:I am passionate about collaborating with organizations committed to enhancing their Information Security posture, achieving regulatory compliance, and mitigating risks effectively. Let’s connect to explore how my expertise can contribute to your organization’s success.
