In my role, I excelled in conducting third-party risk assessments, ensuring vendors aligned with our client's risk tolerance and implementing recommended security controls. I also serve as a trusted security Subject Matter Expert (SME) for vendors, ensuring software compliance with privacy regulations.I play a pivotal role in developing and implementing comprehensive organizational information security policies, standards, and procedures. These covers critical areas like application security, encryption, password policies, and clean desk policies. Additionally, I create adaptable technical hardening requirements for applications and platforms, significantly enhancing our overall security posture.I also champion a risk-based application development practice, prioritizing Confidentiality, Integrity, and Availability, while strictly adhering to OWASP secure coding standards.In a collaborative DevOps environment, I closely collaborate with architects and developers to enforce secure coding practices based on OWASP recommendations. Furthermore, I take the lead in steering committee meetings with key stakeholders, fostering a collaborative approach to program-level decision-making, execution, and continuous improvement.

Implemented a new Incident Response Strategy, reducing incident detection-to-response time by 50%.Conducted monthly Vulnerability Scans on 500+ internal assets using Nessus, achieving 80% remediation within SLAs.Deployed a SIEM Platform that resulted in a 60% efficiency gain in security monitoring and event correlation.Achieved 85% data coverage within 6 months through the rollout of a Data Loss Prevention (DLP) program.