I am a seasoned Information Security Risk Management professional with a Bachelor's degree in Computer Information Systems and over a decade of experience in Cybersecurity and IT Engineering. I specialize in identifying and assessing security risks, implementing mitigation strategies, and enhancing organizational resilience. My expertise includes frameworks such as Zero Trust, MITRE ATT&CK, NIST, CIS, and SOC, which I utilize to strengthen security postures and ensure compliance with industry standards. I am proficient in Multi-Cloud Security CNAPP, CSPM, CIEM, and CWPP tools, including Microsoft Defender for Cloud, Rapid7 inSightCloudSec, Tenable Cloud Security and AWS Security Hub, to effectively manage risks across cloud, hybrid, and on-premises environments. I leverage native cloud security controls—such as encryption, firewalls, security groups, logging, alerting, IAM, and services like Amazon GuardDuty, Security Hub, Macie, CloudWatch, Cloudtrail, VPC, Azure Monitor, Defender, WAF, NSGs, and vNets—to enhance security frameworks. My experience in Identity and Access Management (IAM), Privileged Access Management (PAM), and User and Entity Behavioral Analytics (UEBA) tools, including Okta, Entra ID, Active Directory, Google Workspace, Microsoft 365, Delinea and BeyondTrust, allows me to effectively manage user access and mitigate risks. I have a strong background in deploying SIEM, SOAR, and XDR solutions like Rapid7 insightIDR, InsightConnect, and Microsoft Sentinel to orchestrate incident response using automation to ensure quick and effective action during security incidents. My skills extend to managing Endpoint Security, Endpoint Privilege Management (EPM), and Mobile (MDM) using tools like Intune, Jamf, MECM, SCCM, NinjaOne and AirWatch. I implement advanced security measures, including Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) solutions such as CrowdStrike and Microsoft Defender. My experience also encompasses deploying Email Security Gateways, SASE, SD-WAN, SSE, Web Filtering, CASB, Next-Generation Firewalls, IDS/IPS and Data Loss Prevention (DLP) tools like Zscaler, Netskope, Cisco Meraki, Proofpoint, Mimecast, and Fortinet. Additionally, I am proficient in Vulnerability and Patch Management using Nessus, Qualys, Crowdstrike Spotlight, Microsoft Defender, and Rapid7 InsightVM, and I have a proven track record in Incident Response, Employee Security Awareness Training, and Risk Assessments. Knowledge of and some hands-on experience with DevSecOps (SAST, DAST, SCA, IaC).