Risk Management and Compliance (Certified ISO 27001 Lead auditor and CEH V10)• 8+ years of experience in Information Technology with exposure to Information Security, Software Development, Production Support and Project Management Operations.• Risk based analysis and Security control review of Services, Security Tools, Legal Processes & Policies• Checking Information Security compliance with ISO2k/SSAE16/PCI DSS/COSO frameworkVendor/Supplier risk assessments:-• Conduct ISO 27001:2013 Gap Assessments and implement and maintain information security solutions to support ISO 27001• Prepare and execute ISO/IEC 27001:20013 internal audits for conducting internal audits and interviews to collect information and artifacts/evidences needed to complete an audit risk assessment.• Create comprehensive internal audit reports in accordance with ISO/IEC 27001 requirements and internal processes on areas of risk, conclusions and recommendations for appropriate actions to mitigate the risks• Following up with vendors/suppliers on audit recommendations to mitigate relevant risks• Logging, tracking and closure of findingsInternal application security assessments:-•Contacting technology team/developers for assigned internal applications and gather relevant background material about the application and setting up interviews with developers and system owners for information gathering.•Conducting remote/telephonic interviews with tech team owners to get all required information for application security assessment and to identify any gaps.•Reviewing system related material including technical specifications, technical architecture diagrams, requirements and test plans to ensure that applications are compliant to internal information security related standards of the organization.•Creating comprehensive application security assessment reports identifying the security gaps and improvements/remediation opportunities to technology team