Cybersecurity Governance Risk and Compliance (GRC) Advisor at Dell Technologies

Organize Information Security Management System (ISO 27001:2022), conduct Risk Assessments, Lead Internal and External Security Audits, Ensure compliance with the Payment Card Industry Data Security Standard, SSAE 16, and SOC 2 Type II.• Plan Business Continuity and Disaster Recovery activities, including Business Impact Analysis and Testing.• Manage Vulnerability Scanning, System Hardening, Firewall configuration.• Develop and coordinate Incident Response Plan and Procedures based on best practices from NIST SP 800-61 standard, including Preparation; Detection and Analysis; Containment, Eradication, and Recovery; and Post-Incident Activities.• Enhance Change Management Procedures.• Monitor endpoint and network Data Loss Prevention controls.• Update Security Policies, including Acceptable Use, Clean Desk Policy, Remote Work Policy, Data Classification and Labeling, Software Development Lifecycle (SDLC), Asset Management, Media Handling, Access Control, User ID Management, Password Management, Cryptography, Capacity Management, Backup, Malware Protection, Logging and Monitoring, Network Security, etc.

Responsible for providing maintenance to network infrastructure across a multi-site call center network. Managed Avaya PBX, Cisco Switching and Routing, Firewalls and Check Point Security Gateways and VPNs. Monitored network performance, provided troubleshooting and outage resolution.