 Strategy creation for audits and auditing external vendors prior onboarding them or while renewing their existing services for the client. The reason the strategy varies as the threat landscape keeps evolving and with the advent of Generative AI the attack surface has widened further. The audits are more Vendor Specific based on the kind of Web Applications, Mobile Applications and Network based services that are provided by respective vendors. Organizing daily connects sessions and Weekly Review Sessions with the team at Onsite (in US & Mexico) and at Offshore (within India). These sessions help to gauge the challenges that the team might face, brainstorm for solutions, thought provoking and drives innovation. As any other Client, this BFSI client also have hundreds of Vendors providing various services. Hence, post completion assessments the auditor upload the Risk findings in GRC Tools like RSA Archer and OneTrust web portals with specific remediation dates to close the risk items. Our teams follow them up till closure of the risk within the remediation timelines as agreed as per the Organizations’ Information Security requirements.  Ensuring that the team is updated with Knowledge of Cybersecurity developments. Hence, ensuring that the team takes advantage of the existing services like Recorded Future and Security Scorecard. Always highlighting the importance of being part of professional group outside work like ISACA and CSA etc. Yearly 1 or more professional certification are emphasized. Researching various resources online to provide insight and innovative ideas to the existing processes is also encouraged. Research and Study is a big part of my role. I am also active member of ISACA and EC Council. I have myself completed the certifications CISM, ISO27001 Lead Auditor, CCSK & CEH v12 (Ethical Hacking). I attend various Webinars, Conferences organized by ISACA Bangalore Chapter or worldwide.

Expertise in planning the scope of audits including preparing risk assessments, researching relevant technical information, and creating audit programs across Banking (HSBC US Geo) & Utilities (TCS UK Geo)Success in performing risk based IT audits that review security and controls of IT processes, applications, networks, databases and various operating systems Competent in gathering and interpreting audit evidence, preparing clear and concise work papers, and supporting findings with effective documentation Highly capable in managing multiple assignments & strong people management & networking skillsExhibited leadership expertise as Information Security Manager for UK Utilities Account within TCSCollaborated with global, cross-functional teams and senior business leaders to provide corporate vision and define the Information Security StrategyExpert knowledge of internal as well as external auditing, internal controls & risk managementAcknowledged for exceptional performance in process improvements, change management and facilitation of multiple projects while ensuring complianceComprehensive understanding of internal control environments within the IT functionExcellence in end-to-end program/project planning & implementation; skilled in managing project team and ensuring high-quality deliverables that meet timeline and budgetary targetsProfessional expertise in the design and implementation of strategic security programs that provide operational excellenceActed as an escalation point for Incident Managers and ensured their bridging, including initiation of any necessary escalations and business impacting issuesHands-on experience in preparing reports on audit results and creatively generating and developing practical recommendations to management for review and implementationObtained Third Party Certifications CISM Certified from ISACA, ISO 27001: 2013 Lead Auditor, ITIL Foundation Certificate in IT Service Management V4

− Steered efforts as an Ops Manager and led a team of 12 Team Leaders− Impressive success in migrating 2 new areas of work− Played a key role in generating more revenue with addition of new LOBs within those areas

Presently it is known as HSBC Global Resourcing− Administered the migration of HSBC Card Services work for subprime market− Impressive success across High Sales Queue management− Felicitated with several site level awards for achieving and exceeding targets consistently