Nirav's role incudes below Strategic responsibilities:Raise the cybersecurity program's profile within the organization (Pre & Post Information security risk management).increase delivery of cybersecurity services internally.connect with business units, learn their needs and offer them technical and operational risk management support; and organize and execute cybersecurity service delivery at the business level. Collaborate and support the external audit compliance requirements such as ISO 27001, ISO 27701, SOC 2, PCI DSS for APAC clients.Effectively manage Incidents Response Program by liaising with various key stakeholders to ensure compliance with contractual requirements.

As a Country Privacy Lead, Nirav manages the data privacy compliance requirements for offshore and domestic business. His roles involves teaming up with all the business stakeholder and assess their privacy compliance. He drives the information security & privacy assessments for all emerging technology that helps business to achieve process excellence. He is responsible for driving data privacy framework and flourish the security culture within the organisation. His Primary Responsibilities includes:· Implement the privacy risk program and audit function at all sites within the region.· People management, coaching, and development of multiple audit staff members.· Drive the privacy awareness culture with in the organisation· Serve as the point of contact for answering privacy-related questions within the region.· Identify and assess privacy risks across the region.

Support’s Lead ISM in managing the compliance for all the critical offshore banking processes. Mapping the controls with Clients Supplier security standards for monthly security metrics review. Conducting relationship audits for client and subcontractors. Investigating information security incidents and recommending the corrective action plan for the same. Reviewing / approving change management request for BFSI domain on regular basis.

• Handling end to end information security business requirements for the International Business Outsourcing ( US / UK Region)• Ensuring all the western region sites/client processes adhere to ISO 27001:2013, SSAE16 and PCI DSS v3 compliance.• Conducting internal audit as per the annual audit calender • Coordinating with external auditor/ clients for surveillance audits.• Liaising with internal customers / SME's for process / compliance optimisation

• Risk assessment for all the vendor engagements and business exception requirement. Ensuring all the residual risk are Signed off by the CISO and CTO.• Vulnerability assessment and Penetration Testing Assessments for all the critical IT assets, including review of external penetration testing reports.• Preparing action plan for risk mitigation from vulnerability highlighted in the assessment reports • Coordinating with IT operation and the application development team for fixing the vulnerability based on the patch management terms.• Preparing and reviewing hardening documents for critical IT assets • Preparing IT security policy documents based on emerging IT needs• Reviewing endpoint compliance reports • Reviewing Web-filter proxy policy and compliance report • Assessing various IT security solutions available in market to meet current and future business requirements. • Preparing comparison sheet and business case document for the product procurement.• Conducting vendor and client security assessments as a when required.

Worked on various Infosec projects (approx 100+) which included Vulnerability assessments, Penetration testing , web application security, ISMS risk assessment.