Huma Ansari Email & Phone Number

Certified CISM, CISA and ISMS Lead Auditor ISO 27001:2013 & Trained in CCSP; GRC & Audit enthusiast with 15+ years of experience in Security Process & Operational Compliance, Risk assessment, Information Security Consulting and Audits. An effective communicator with excellent management skills and ability to manage multiple client projects.Core Competencies:Information Security Governance & Compliance Management: • Implementing internal procedures & ensuring compliance requirements are met, organizational records are protected and controls are in place.• Ensuring all applicable laws (ISO 27001:2013 / PCI DSS EU BMR), regulations & requirements are adhered to achieve the set compliance level.• Performing gap analysis to adhere the regulatory compliance level.Risk Management:• Setting policies, structure & strategy for risk management.• Preparing reports on risk for board & stakeholders.Audit Management:• Conducting Internal audits.• Implementing the annual audit plan, special tasks or projects requested by management and the audit committee.• Fronting external audits.• Consider the scope of work of the external auditors and regulators, as appropriate, for the purpose of providing optimal audit coverage.• Mitigating & closing the gaps identified in audits.• Preparing & submitting audit reports. Policy & Process Management:• Providing management assistance and recommendations for the information security programs.• Developing, maintaining & reviewing security policies, standards, guidelines, processes, and procedures.• Overseeing the monitoring and compliance with policies, standards, guidelines, processes, and procedures.• Creating a security policy acknowledgement process.Technical Background:• Possess good knowledge of Networking and Security Devices• Good understanding of cloud (IaaS, SaaS, Paas)

Listed skills include Information Technology, Project Management, Operations Management, and Resource Management.

• 

  Welingkar Institute Of Management

  First Class