Danish Naseem Email & Phone Number

Berlin, De

Berlin, Germany

-Developed and implemented Information Security Policies to ensure compliance with regulatory and legal requirements, aligning with the organisation’s cybersecurity framework and international standards such as DORA and GDPR.-Implemented a cybersecurity framework, policies, and procedures that align with industry best practices and information security requirements, customised to the organisation’s unique needs (including NIST, BaFin MaRisk, BAIT, and ISF).-Collaborated with the CRO and CISO to assess regulatory and compliance risks, strategies gap mitigation, and establish transparent accountability channels within the IT compliance landscape.-Conducted comprehensive technical risk assessments on critical applications to identify and prioritise potential threats, implementing risk management strategies and controls to effectively mitigate the identified risks.-Providing guidance to internal stakeholders on information security from a Risk Management, IT Compliance and Governance perspective.- Conduct Security Risk Assessments with N26's 3rd parties, supply chain partners and external partners- Ensure annual Security Reassessments of N26's 3rd parties providers. - Provide mitigation measures on risks identified during risk assessments and annual re-assessments.- Regularly conduct control activities and training to monitor the staff adherence and theirunderstanding of internal documents/security policies.- Collaborate with all internal departments to ensure that regulatory requirements are consistentwith BaFin and MaRisk requirements.

Bengaluru Area, India

- Provided security consultancy and advisory services to projects across various business lines within Shell.- Actively participated in IRM team and community meetings, representing both IRM and business interests in applying standards and policies, contributing to a fit-for-purpose IRM framework.- Enhanced overall IRM framework efficiency by managing cybersecurity risks related to third-party vendors through the establishment of vendor risk management processes.- Implemented continuous monitoring and control measures to mitigate identified risks, utilising controls at the user entity level of a service organization.- Translated technical, legal, and regulatory compliance obligations into security controls, ensuring alignment with IRM requirements through effective technology and governance framework integration.- Ensured compliance with cybersecurity regulations and frameworks by monitoring regulatory changes and updating organisational governance frameworks and policies as needed. Conducted regular compliance assessments and internal reviews to maintain adherence and address potential gaps.- Established Security Training & Awareness functions, reporting to the CISO. Developed and delivered security awareness and training programs across business units, ensuring alignment with IRM security frameworks and policies.- Conducted annual gap analysis on the IRM framework to identify new regulations and requirements, ensuring the organization maintained its compliance posture.- Translated technical, legal, and regulatory compliance obligations into a cohesive collection of security controls, providing stakeholders with IRM requirements and implementation methodologies.- Collaborated with Project Managers, Business Analysts, Architects, and Support Teams to ensure Shell IRM standards were followed and security was incorporated into the Software Development Life Cycle.

United Kingdom

•As a Security Consultant, my responsibility is to perform the Technical Security Risk Assessment with multiple IT infrastructure and application development projects and teams to advise on the correct adoption of existing and new security technology controls.•Prepared the Risk assessment framework based on ISF IRAM2 framework.* Evaluated IT infrastructure and application development projects, successfully reducing security and regulatory risks by 30%through a comprehensive cloud migration risk assessment strategy. * Developed a Cybersecurity risk assessment framework based on the ISF IRAM2, integrating governance, regulatory compliance assurance, and technology integration to enhance risk management processes. * Provided security consultancy for internal and external projects, focusing on fraud detection, regulatory compliance, sustainability, and process improvement to ensure strategic advisory and innovation. * Generated KPI reports and provided updates to senior management and relevant stakeholders on the organisation’s cybersecurity governance activities and risk posture. •Responsible for working with infrastructure engineering and application development programs and teams to advise on the security risks they need to address and the correct selection and implementation of Info sec controls. •Responsible for working with the security engineering function to guide the strategy around new security technology controls.•Responsible to perform the Security Risk Assessment before the application migration to the cloud environment. •Having good exposure in performing analysis of risk data to estimate and calculate the overall risk appetite.•Having an exposure to prepare the impact reports for the business line based on the data analysis of existing open risk findings.•Having good exposure in performing the risk assessment on upcoming internal as well as external projects.

Norwich, United Kingdom

As a Security Consultant, my responsibility is to perform the Technical Security Risk Assessment with multiple IT infrastructure and application development projects and teams to advise on the correct adoption of existing and new security technology controls.• Prepared the Risk assessment framework based on ISF IRAM2 framework.• Responsible for working with infrastructure engineering and application development programs and teams to advise on the security risks they need to address and the correct selection and implementation of Info sec controls. • Responsible for working with the security engineering function to guide the strategy around new security technology controls.• Responsible to provide the security consultancy for upcoming internal and external project.• Responsible to perform the Security Technical Risk Assessment on the new and change function.• Responsible to perform the Security Risk Assessment before the application migration to the cloud environment. • Having good exposure in performing analysis of risk data to estimate and calculate the overall risk appetite.• Having an exposure to prepare the impact reports for the business line based on the data analysis of existing open risk findings.

Bengaluru Area, India

• As an Information Security Manager responsible to maintain the overall compliance posture of all the services which Wipro providing to the client.• Responsible to update the client on the global compliance posture of the account in quarterly board meetings.• Responsible to maintain the compliance of end point machines. • Prepared the risk assessment framework and methodology based on client requirement.• Prepared the Common Control frame work which incorporates the global and local regulation.• Prepared the ISMS based on client requirement and implemented the same on account level.• Prepared the Data Privacy framework and implemented for the centralized solutions.• Prepared the BCP / DR framework and BCP plans for the services provided to client.• Prepared the test of design and test of effectiveness for the technical controls.• Analysis and the validation of any exception on ISMS policy.• Prepared the Risk assessment framework and perform the risk analysis on tools.• Conducted the risk assessment on critical services and provided the risk report to client.• Managed the compliance of IT General Controls to ensure SSAE 16 Type 2 adherence.• Having good knowledge in data Privacy and regulatory compliance.• Conducted the security awareness workshop to ensure the compliance posture of the account.• Responsible to prepare the RCA after performing the investigation of major information security incidents.• Responsible for preparing the compliance dashboard to report the compliance posture of the tools.• Overseeing the compliance of the ODC to ISO27001 requirements.• Coordinated with third party auditors/consultants for audits.

Chennai Area, India

Vendor Security Assessment & Remediation Coordination• Continually update the vendor inventory within Archer GRC tool for tracking and producing reports.• Assist with tracking across the vendor assessment program as part of the overall remediation efforts.• Provided support for business owner / Relationship Manager in completing the risk classification survey.• Suggest and document enhancements based on operating realities or repetitive issues encountered• Develop and generate reports post completion of the assessment, communicate the findings and submit the report to vendors and Vendor Relationship Managers.• The scope of Coordination of the Remediation efforts will include coordinating the remediation of the security gaps identified as part of the assessment of the application, infrastructure, and findings from industry standards like ISO 27001, PCI-DSS and regulations like SOX.• Handling Policy Exception Request.Business Continuity and Disaster Recovery Planning• Prepared the Business continuity planning framework.• Having hands on experience in Preparing, implementing and testing of Project specific BCP and DR plans.• Prepared documents relating to BCP like BIA, Risk Assessment, and Recovery Strategies.• Experience on conducting full interruption test to test the BCP preparedness.

Bangalore

IT Security & Compliance Subject matter expert for the account to maintain the compliance posture.  Focal for the internal QA team and have experience of handling/performing audits. Knowledge on GSD331 Customer Security Standards and ITCS104 IBM Standards. Security assessing and identifying of Non-Compliances and ticketing these non-compliances for the remediation. Perform the health checking through the tool Tivoli Security Compliance Manager. Reporting and attending meetings with the UK Teams for providing updates and status on the Health Checking Tracking the compliance aspects and reporting to the appropriate teams (Compliance Reporting). Review the deviations and requests for implementation of appropriate policy and ensures these deviations are supported by adequate compensating controls in stipulated time of resolution.  Reporting on Non-compliances of the OS Servers, Application servers, network devices (CIRATS collection) to management so as to get it compliant Handle Escalations. Create Process Behavior Charts, track and analyze workload.Vulnerability Management Focal for TCP/IP vulnerability scanning team & handling various EMEA accounts. Responsible for the security compliance of IBM supported servers across EMEA. Create scan groups and scheduling the scan for servers. Schedule scans through the Qualys guard. Have knowledge on top ten OWASP Vulnerabilities. Assess the Scan report and prioritize the vulnerabilities. Have Knowledge of IBM Security processes (e.g. GSD331, ITCS104, ISec). These standard documents are used to meet the customer’s requirements. Part of CAB (Change advisory board) for the approval of server down time. KPI (Key Performance Indicator) Tracking Monthly and weekly. Have experience of handling/performing Audits and been focal for several internal/external Audits.

Bachelor'S Degree, Information Technology

Diploma, Information Technology

Education record

Education record