•Conducted internal security audits, assessing people, processes, and technology for vulnerabilities and weaknesses, resulting in a 20% reduction in identified vulnerabilities and an overall improvement in security posture. •Developed, maintained, and ensured compliance with ISO 27001/2/5, NIST CSF, NIST SP 800-53, SOC 2 & PCI DSS, by authoring numerous information security policies, standards, and procedures. •Actively participated in the vendor risk assessment process, providing security risk assessment services and contract reviews, resulting in a 25% reduction in security risks associated with third-party vendors. •Engaged in security testing, incident response, and staff training, resulting in a 20% decrease in incident response times and minimized damages. Collaborated with cross-functional teams to enhance staff awareness, reducing organizational risk by 15%.

•Led the development and implementation of comprehensive risk identification and assessment protocols, utilizing Nessus for vulnerability scanning to conduct in-depth risk assessments across the organization.•Developed and implemented risk mitigation strategies and controls, leveraging platforms such as Jira and ServiceNow to track and manage risks and security incidents effectively. Utilized Azure Sentinel for real-time monitoring and detection of emerging risks and advanced threat intelligence and trend analysis, facilitating the development of key risk indicators (KRIs) and key performance indicators (KPIs).•Partnered with Architecture, Infrastructure, and Technology teams to review existing architecture, identify gaps, and recommend security enhancements, enhancing security integration and alignment by 40%. •Ensured compliance with regulatory requirements by developing and maintaining compliance programs, resulting in a 15% improvement in compliance scores.