I am having more than 3 years of industry experience in Information Security management, involvingrisk assessment, implementation, and internal audits based on ISO 27001:2013 standard for variousclients.Executed ISO 27001:2013 based implementation projects across various verticals and industries.Performed risk assessment initiatives to enable the Organizations to reduce the risk appetite and focus on mitigating them or bringing them to an acceptable level.Conducted internal, external audits, third party audits, regulatory audits, conducted user awarenesstraining, risk assessment, incident management, and IS management documents review, based on bestpractices of ISO 27001:2013 standard.

> Assist various third parties for vendor risk assessment > Oversees the implementation of operational risk management policies, due diligence process and ISMS framework> Evaluating concerned evidences against highlighted observations>Play a role in performance management by writing appraisals and giving personal feedback for vendor risk assessment project> Manage and develop resources with direct assessor and business SPOC’s> Lead the onsite assessment> Develop project plan and execution approach

Information Security Awareness