• Develop and implement reporting mechanisms for governance and risk practices to support compliance and highlight areas of exposure, minimizing risk to the business services.• Consult security controls and guidelines as per the ISO 27001:2013, ISO 22301:2012 and ISO 27018:2014 standards to the cross functional business domains.• Conduct periodic assessments and continuous monitoring of the key performance metrics (KPI) to ensure compliance.• Work closely with developers and evaluate business requests and proposed designs to determine feasibility; work with software development teams to define alternatives and recommend optimal solutions to meet security and regulatory requirements in the design of new enhanced systems• A definitive and inventive understanding of implementing Microsoft Azure Security technologies such as Azure Security Centre/Sentinel, Gateway Security, Network Security Groups, Azure Application Gateway, Azure AD Privileged Access, Azure Key Vault, Azure Log Analytics etc• Performing technical security reviews, audits, assessments and assisting with third party management• Assisted project teams to evaluate appropriate classifications of data and manage data protection requirements as defined in the General Data Protection Regulation (GDPR)• Assist in the design and implementation of Secure DevOps (DevSecOps) practices across the business domains following Secure by Design (Shift-Left) methodology• Demonstrated ability to articulate and communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms and recommend alternative solutions to these stakeholders.