Gulam Shaikh Email and Phone Number

• Conduct end to end Application Risk Assessment across centers• Responsible for planning, executing and managing 3rd Party Self Security auditing assessment for Supplier• Engage with Business and Technical stakeholders to discuss and solicit information and agreement on outcome of the Application Risk Assessment and Supplier Assessment• Prepare reporting based on agreed templates and processes and share with IT and management• Collating and presenting information for Information Security Committee (ISC)• Assist in transfer of knowledge to other operational and security staffs• Undertaking other tasks assigned by CISO• Assisting other security teams like (Identity and Access Management, Cyber Defense Center, Privilege Access Management, Exception management)

• Responsible for planning, executing and managing 3rd Party Self Security auditing assessment for vendors.• Facilitating SOX compliance Audits for SOX relevant applications with Management and Big4 for 15 plus applications.• Performing Sox relevant trainings to Service Managers to ensure audit compliance• Coordinating with internal teams for analyzing and tracking Security incidents.• Reviewing Vulnerability Scanning, Anti-malware and other security reports to ensure compliance, also periodic reporting to Management and client on compliance status.• Assisting internal project teams and client for Risk Assessment.

• Responsible for planning, executing and managing various auditing assessment projects for clients.• Performing control testing for ISO 27001 / ITGC audit engagements for clients based on Statement of Applicability (SOA).• Understanding various business processes and computer processing environments.• Identifying various control requirements in the process and developing audit work programs.• Performing Gap Analysis and Identifying Control Weakness.• Recommend process changes to eliminate/reduce impact of gaps identified.• Discussions of key issues identified during assignment and provide value-added recommendations to the client’s management.

• Preparing and maintaining risk register, tracking for closure of identified risks as per agreed plan.• Liaising with different business groups and support functions for streamlining process and standardization across locations.• Managing Identity and Access Management (IAM) team to ensure access provisioning and de-provisioning as per the Service Level Agreement (SLA) defined.• Liaising with different business groups and support functions in preparing Business Impact Analysis (BIA), establishing BCP plans for critical identified business processes and maintaining drill reports.• Liaising with different business groups and support functions in preparing Disaster Recovery drill plans and maintaining drill reports.• Liaising with support functions to ensure timely integration for information systems with Security Incident and Event Management (SIEM) tool.• Preparing and reviews of correlations rules in SIEM tool as per security requirements. Conducting Audit Trainings and making SOP (Standard Operating Procedure) manuals• Liaising with different support functions and business to ensure adequate tracking and closure of security incidents reported.• Performing Vulnerability Assessment for information assets as per defined frequencies, Tracking and closure of identified vulnerabilities.• Conducting Internal Audits based on SOA (Statement of Applicability) to test Compliance for ISO 27001-2013.

Troubleshooting Hardware, Software, and Internet issue for clients.