Develops and implements a risk management program for security and privacy-related areas, which includes modeling threats, identifying risks and vulnerabilities, establishing a risk analysis and mitigation plan, and reporting to executive management on both a regular and event-driven basisProvides strategic and tactical security guidance for programs and projects that involve security controls, including the evaluation of the enterprise architecture, hardware, software and technical controlsLeads an enterprise information security incident response organization, provides oversight over security investigations, and assists with disciplinary and legal matters associated with security breaches and policy violations as necessaryCoordinates the use of external third-party resources involved in the development, implementation and monitoring of the information security program, including performing penetration tests.Establishes a metrics-driven dashboard to evaluate the effectiveness of the Information Security program.Serves as a key thought leader in the field of Information Security, which includes working with key partners and vendors to develop thought leadership around policies, process, and capabilities.Security Analytics / event correlation systems administration, rules development, etc.Participate in the design and day to day administration of security systems that reflect state-of-the-art security best practices and compliance, strong focus on DevOps.Developing, managing, and maintaining a posture of security practice / technology modernity with all systems under the purview of the global IT portfolio, includes, a server portfolio comprised of Windows and Linux systems on a range of X86/64 servers, the .NET and Java stacks, firewalls, ID/P (NIDS&HIDS), DLP, network-based AV, etc.

Designed and implemented high available hybrid network infrastructure across several on-premises Data Centers and Cloud Providers.Developed architecture for Qualified remote digital signature using Public Key infrastructure (PKI).Defined, implemented, and enforced information security policies, procedures, and standards to meet regulatory requirements (ISO 27000, eIDAS).Established measures, metrics, thresholds and targets to drive performance in alignment with security and other business strategies.Oversaw safety of assets by enforcing and regulating security policies, procedures, monitoring and maintaining security systems.Researched, reviewed and recommended equipment, and technology solutions to prepare and maintain security expenses within approved budget.Reported on all technology risks - particularly on cybersecurity - to the Board’s Risk Management Committee.Researched and implemented computer forensic tools.Conducted security audits to identify vulnerabilities.Conducted Penetration tests to exercise BC, DR, and incident management plans.Defined, implemented, and maintained controls necessary to protect the Internal networks/Internet perimeter in accordance with security requirements (firewalls, DMZ, network connections, third-party connectivity, remote access, VPNs), and intrusion prevention/detection IPS/IDSMonitored users, applications, networks, systems, access to physical assets (includes intrusion detection/prevention, email/spam filtering, web filtering)Performed risk analyses to identify appropriate security countermeasures.Reviewed violations of computer security procedures and developed mitigation plans.Developed and grew staff competencies through team development, implementation and support of specific training for various responsibilities.

Implementing message collaboration system.Developing and implementing VoIP Call Center solution using Asterisk PBX.Consulting in developing CRM system.Implemented UTM solution.VMware Severs Virtualization & Clustering.Provided detailed technical documentation and procedural guidelines.Performed system maintenance and upgrades, including patches, service packs, hot fixes and new security configurations.Managed windows domain move and raised domain level.Windows and Linux server administration.Implemented Network Monitoring System.Planned and implemented effective disaster recovery and business continuity solutions.Providing advice in selection and purchase of IT equipment.Backed up support desk team to handle user problems and technical concerns.Third-level support

Designing, implementing and managing MS Active Directory and MS Exchange ServerManaged network and system performance, conducting troubleshooting, security patching and maintenance.Presales consultant in HP Server & Networking equipmentWrote policy, procedure and manuals governing internal IT use.Monitoring progress of third-party maintenance contract suppliers.

Migrated Windows based workstation and servers to Linux.Configured, tested and maintained server infrastructure.Implemented corrective plans of action for network performance issues including availability, utilization, and latency.Worked with users to determine areas of technology in need of improved usability.Provided third-level support for all server class systems.

Oversaw IT activities to maintain operations by maintaining workstations, laptops for 250 users.Spearheaded inventory control measures to replenish and maintain IT equipment, supplies, tools and replacement parts.Conducted testing and troubleshooting for various software remotely and onsite for 6 server sets to maintain operational readiness.Developed programs to integrate and update software products and improve system compatibility.Planned and implemented complex internet and intranet applications on multiple platforms.Standardized job tasks and trained junior team members on industry best practices and standards.Evaluated latest technology innovations and adopted cost-effective, useful solutions.

Experienced in supporting Cisco and Black Diamond routers, switchesPerformed necessary maintenance to support network availability.Performed troubleshooting and packet analysis.Performed day-to-day network administration, maintenance and supportMonitored network capacity and performance, as well as diagnosed and resolved complex network problems.Administered and prepared programs for IP addresses, developed network resources and trained support personnel to provide Tier I support to end users.Backed up support desk team to handle user problems and technical concerns.Increased knowledge base for help desk staff by authoring documentation for system configuration and troubleshooting.Participated in on-call rotations during holidays, weekends and overnights to handle emergency network situations.