13+ years of experience in Information Security, Risk Assessment, Internal Audit and Business Excellence. Currently focused on applying Vendor Risk Management discipline to the converged security function. Demonstrated track record aligning the security strategy with business strategy delivering security capabilities to drive positive business results. Effective communicator with proven ability to build strong working relationships and convey complex solutions and issues or observations effectively to all levels of management. Specialization: • Deep understanding of Enterprise Risk Vendor Management Frameworks, Cyber Security, Critical Vendor Relationship Management, IT Control Testing, Application Controls, Business Resiliency, Physical Security, Business Excellence, IBM-ASCA, Internal Audit.• Strong Knowledge on ISO 27001, PCI-DSS (4.0), ITGC, NIST 800, GDPR, SOC1/SOC2, ICFR, , PCMM L-3, COPC, OHSAS 18001, CISA(Learning In Progress)• CPISI (4.0), CRISP (ISO 31000, ISO 27001, ISO22301), Six-Sigma Green Belt©