Mark Sequeira Email & Phone Number

Mumbai, Mh, In

Dublin, Dublin, Ie

• Led internal audits, SOC 2 external audits, and CSA Star Level 2 audit.• Monitored GDPR and CCPA compliance.• Implemented Data Loss Prevention (DLP) measures on Google Drive.• Reviewed Data Processing Agreements (DPAs), Security Exhibits.• Identified and reviewed security deviations, gap analysis to the organizations security policies and standards• Developed and implemented compliance policies and procedures.• Collaborated with product teams to integrate compliance into all stagesof the product lifecycle.• Managed Third-Party Risk Management (TPRM), assessing vendor risksand ensuring compliance• Conducted risk assessments and mitigated compliance risks.

Dublin, Dublin, Ie

Conducted Internal SOC 2 audits, ensuring compliance with industry standards.Assisted in achieving CSA Star Level 2 certification for enhanced information security.Managed External audits, facilitating smooth audit processes.Reviewed Master Services Agreements (MSA) and Data Processing Agreements (DPA) for security compliance.Communicated with customers to address information security concerns.Conducted Data Protection Impact Assessments (DPIA) for new products.Led Third-Party Vendor Risk Assessments to evaluate security risks.Managed Internal Compliance initiatives to meet industry standards and regulatory requirements.Implemented Data Loss Prevention (DLP) measures to safeguard sensitive information.

Worldwide, Oo

Worldwide, Oo

1. Collaborated with a team of colleagues for the smooth and timely execution of Service Organization Control Reporting (SOCR) engagements as per SSAE 18 / ISAE 3402 for reviewing controls surrounding Infrastructure Management services and Application Development and Maintenance services at leading IT service providers.2. Tested controls surrounding operations management, network security, access management, capacity management and configuration management domains with assistance from a team of resources.3. Reviewed security configurations on IT systems running on various technology platforms such as Windows, UNIX, Linux, AS/400, SQL and Oracle databases.4. Performed review of design and operating effectiveness as well as testing of Logical Security, Change Management, Physical security and Environmental safeguards as a part of Information Technology General Controls (ITGC) surrounding critical financial applications and databases at leading information technology and manufacturing clients.

Brussels, Brussels, Be

•Performed Application security assessment for major public sector banks of India.• Performed internal and external vulnerability assessment and penetration testing of servers and configuration audit of network devices and servers on banking applications for one of major public sector banks.• Performed ITGC review for various clients based in Media and entertainment, construction, Telecom and IT industry. Audits included effective review of internal IT processes, management review meetings, risk assessment etc. • Conducted vendor risk management reviews for multiple public and private sector banks of the country.

Mumbai, In

ISO 27001:2013 implementation support for one of the major manufacturing industry. Activities covered included: • Building Information Asset Registers. • Information Security Risk assessments • Preparation of ISO 27001:2013 ISMS Documentation. • Implementation of the ISMS Security Controls, ISMS Internal Audits Independently performed IT risk assessment exercises for varied operational and IT processes, covering the below activities: • Creation of a threat vulnerability repository • Identification of threats and vulnerabilities • Identification of existing controls • Evaluation and calculation of risk severity • Identification of risk mitigating controls • Evaluation of the residual risk