As an Information Security Auditor, my role involves conducting comprehensive audits to ensure organizational compliance with ISO 27001 and PCI DSS standards. I meticulously plan and perform internal and external audits, reviewing policies, procedures, and controls to verify adherence to these standards. My responsibilities include documenting all findings and creating clear, factual, and constructive audit reports. I assess the organization's risk management strategies, identifying and addressing any non-conformities. By providing recommendations for improvements and conducting follow-up audits, I ensure the effectiveness of corrective actions. Staying informed on the latest standards and best practices, I communicate audit results clearly to management and stakeholders, all while adhering to professional ethics and impartiality.

• Reviewing various assessments for the Internal Audit process.• Interacting with clients to understand and effectively manage contractual requirements.• Responsible for implementing controls for different accounts across the organization.• Responsible for testing the controls after implementation based on frequency.• Be part of the external Audits performed for the accounts assigned and ensure to assist the account teams in the closure of those findings.• Assist the control owners in understanding the Control requirement and explaining the requirements of the artifacts needed for the validation of the control.• Review the responses provided by the control owners for the controls and ensure that accurate responses were provided and relevant evidence was attached.• Schedule meetings and explain to the control owners in case there are any non-compliances.

• Performed Information Security related tasks – Access administration on various platforms Log Review and Recertification while providing access-related assistance to users.• Access provisioning for more than 250 applications that help users trade which includes Medium, High Risk and SOX applications.• Handled an acceptable volume of user requests/calls and complete them in the specified Turn Around Time thereby contributing to PLAs.