Mohammad Sadiq Email & Phone Number

• Working as Delivery Compliance auditor for Engagement with different line of business-like ERS (Engineering and R&D Services), DFS (Digital Foundation Services), AFS (Application Financial Services), BFSI and DPO.• Conduct Enhanced Compliance Assessments for numerous projects. Examine Baseline and Contractual requirement - testing Test of Design and Test of Effectiveness controls from the various Domain (HR, Asset, Network, Logical, Operation Security, ISOP, BCP and etc.,)• Register all identify risks, publish draft and final reports, follow-up till risk closure with Engagement, including other enable function like HR, IT, Physical Security team, conduct Bi-weekly and Monthly cadence connect with Engagement Business Unit Heads.• Risk Assessment & retreatment plans - Define and maintain the information security risk assessment process, including the reporting and oversight of the treatment efforts to address the gaps.• Disaster Recovery Management Guiding Engagement to develop and maintain effective BCP/Disaster recovery policies and procedure for respective engagements to align with contractual obligation/organization business continuity management program goals• Security Metrics & Information Security Dashboard define metrics, Engagement Risk Rating and effectively communicate to Delivery Head on Bi-weekly and Monthly basis.• Vulnerability Assessment - Review Engagement specific network devices VA scan report on periodic basis, follow up with respective teams to mitigate the identified vulnerable.• GDPR assessment - Validate Engagement level data privacy controls on high level to understand the Privacy applicability/scope.• Vendor Risk Management - Perform Initial review of Third-Party Vendor profile. Setup a review meeting with the Third-Party Vendor to understand their Culture, Governance and Risk Posture. Share the questionary to the vendor to arrive the Inherent Risk Rating.