Currently I am responsible for aligning the internal cyber security program with the company strategy in such a way where confidentiality, integrity and availability can be maintained in each and every sector of the bank.• Successfully completed ISO/IEC 27001:2022 certification project by reviewing risk management policy and procedure, BCP/DRP, cybersecurity and other key security policies. Achieved certification, enhancing compliance and strengthening organizational security… Show more Currently I am responsible for aligning the internal cyber security program with the company strategy in such a way where confidentiality, integrity and availability can be maintained in each and every sector of the bank.• Successfully completed ISO/IEC 27001:2022 certification project by reviewing risk management policy and procedure, BCP/DRP, cybersecurity and other key security policies. Achieved certification, enhancing compliance and strengthening organizational security standards.• Configure and manage network security devices such as next generation firewalls, intrusion detection/prevention systems (IDS/IPS), web application firewall (WAF), email security gateway, virtual private networks (VPNs).• Implement and maintain security technologies, such as antivirus, anti-malware, and data loss prevention (DLP) solutions.• Monitor and analyze network traffic, system logs, and security events for suspicious activities and indicators of compromise (IOCs).• Implement security information and event management (SIEM) systems for log aggregation and correlation.• Conduct vulnerability assessments and penetration testing on networks, systems, and applications.• Utilize scanning tools and techniques to identify vulnerabilities and weaknesses.• Analyze and interpret security assessment results and provide recommendations for remediation.• Detect and respond to security incidents, breaches, and anomalies in real-time.• Investigate security incidents, analyze root causes, and develop mitigation strategies.• Coordinate with relevant teams and stakeholders to contain and resolve security incidents.• Stay updated with the latest security threats, vulnerabilities, and attack techniques through threat intelligence sources. Show less