• Developed and implemented a robust Cybersecurity and Compliance Program from the ground up, including defining, implementing, and managing Infrastructure Security Operations.• Managed Compliance and Regulatory requirements on a global, federal, state, and local level, and focus on compliance, operational, reputational, and strategic risks that align with the organization’s vision and business objectives.• Managed risk management strategies and security operations, as well as supervised the organization’s risk mitigation and identification procedures.• Led a team of security professionals in the execution of security projects and initiatives.• Collaborated with stakeholders across the organization to identify and mitigate security risks.• Securing Cloud platforms, both AWS (IoT/Mobile) and Azure (O365, Mobile and custom applications).• Developed and maintained a security roadmap that enhances the Information Security Management framework to continually improve Cybersecurity posture.• Conducted regular security assessments and audits to identify vulnerabilities.• Developed strategies to handle security incidents and coordinate investigative activities. • Integrated IT systems development with security policies and information protection strategies.• Designed and delivered awareness training programs focused on security and compliance awareness.• Collaborated and worked closely with the Audit, Legal, and Technology Departments, Cyber Insurance Carriers, Third-party Risk Assessments, SOC 2 Audits, External Auditors, and Regulators, and participated in briefings with external organizations.• Report security metrics and scorecards to the executive leadership team.• Strong understanding of security and compliance frameworks and regulations like PCI, HIPAA, GDPR, CCPA, FINRA, FFIEC & SEC.• Briefing C-Suite, Board, and executives regularly on current Security & Compliance challenges and their impact on the current and future business.

• Responsible for serving Fortune 500 clients and ensuring the successful execution of Cybersecurity projects and Risk Assessments. Strengthen client relationships through quality product and service delivery.• Developed several Information Security Programs for a large multinational in line with various compliance requirements such as PCI-DSS, ISO27001, and NIST 800-53.• Subject Matter Resource on Cybersecurity, GRC, ERP Security, and Incident Management programs.• Handled key clients in the Financial, Retail, Healthcare, Technology, and Manufacturing sectors.

• Worked with global Fortune 1000 corporations helping with risk assessments and building robust Information Security programs and Enterprise GRC solutions in meeting compliance challenges and requirements. • Led major GRC and ERP Security implementations, and multiple compliance assessments, focusing on both financial and IT-related control activities and performing IT risk assessments.• Developed several ERP Security documentation for a large multinational in line with various compliance requirements such as PCI-DSS, ISO27001, and NIST 800-53

• Played key role in supporting SAP Enterprise and Max Attention customers implementing GRC solutions (Access Control, Process Control, and Risk management) for SAP key customers such as SAB Miller, Chevron, Sharp Electronics, Colgate-Palmolive, Ericsson, Petro Bras, etc.• Regional Point of Contact for SAP GRC Process Control and Risk Management solutions customers.• Developed Security and User Provisioning Strategies in alignment with SAP best practices and the business requirement.• Managed teams responsible for performing design assessment, testing, and retesting according to global guidelines including documentation in SAP's GRC Process Control System.

Provided SAP Security and Audit consulting services for the below clients:GE Silicones (Waterford, NY)GE Silicones (Bergen Op Zoom, Netherlands)NYSE (New York, NY)

Developing client specific requirements for Sarbanes Oxley Act (SOX), COSO & CobiT Frameworks and the Internal Controls in SAP ERP.Developing Audit checklists and methodologies for SAP ERP System in compliance with Sarbanes Oxley Act.Differentiating SAP controls as Implementation, System operations, Audit, Preventive and detective controls while defining the SAP controls.