Maintaining trust & compliance of Qualys cloud platform. Participating in rigorous audit by independent third-party companies and government bodies of Qualys software services for compliance with various global and regional standards. Leading different programs across organization such as Vendor risk Management, Product security assessment questionnaire, Standard Information Gathering for Product Security, Legal/Contractual document review,Maintaining Trust & compliance portal, Implementing Unified control framework & Secure control framework - FedRamp, NIST, SOC2, CSA-CCM, ISO27001, DPF

Being Primary assessor Independently led Infrastructure risk assessment program for 70+ device groups at Wellsfargo. Successfully built IRA program & team at India location to collaborate with US counterparts.Being part of the first line of defense actively participated in the Risk control self assessment (RCSA) program. Actively aligned information & cybersecurity RAU with leading industry frameworks.Mapped wellsfargo Technology Control framework with NIST, ISO 27001, COBIT 19, CSA CCM.Implemented 3rd party risk management policy for Technology managers who are handling contract resources at India & Phillipines locations of Wellsfargo.

Being Project lead I did consulting on different Information security projects.SunTrust Bank Inc. :- Being part of enterprise security & resiliency (ESR) Team I was working alongside VP Cybersecurity to safeguard an Endpoint security network of 80,000+ machines including ATMs.GE Appliances :- I was part of Information security governance team & was reporting to Senior Director IT security. Here I performed IT security review of 150+ organizations as a part of Vendor risk assessment according to NIST risk management framework. Also Onboarded, configured & Implemented OneTrust Vendor risk management SaaS based solution.Configured & Implemented Palo Alto HIPS policy for VPN.IPOST :- I was Endpoint security consultant for IPOST Canada working closely with IPOST security leadership team.