IT & Security professional experienced in independent IT audits, information security, and comprehensive IT operations management. With a thorough understanding of ISO 27001 standards and experience in facilitating and conducting audits, risk assessments, and business continuity planning, I bring a proactive approach to safeguarding information assets and ensuring operational resilience. Skilled in managing change processes, enforcing identity and access controls, and facilitating VAPT to mitigate security vulnerabilities. Known for my ability to manage complex vendor relationships, oversee IT asset management, and deliver effective security training to enhance organizational awareness.Core Competencies: • Conducting Independent IT Audits (Internal and Second Party) • Formulating and Enforcing Information Security Policies • End-to-End Audit Management (Internal & External) • ISO 27001 Compliance and Risk Management • Business Continuity Planning & Execution • Comprehensive Risk Assessment & Mitigation Strategies • Change Management Oversight • Identity and Access Management • VAPT (Vulnerability Assessment & Penetration Testing) • Facilitating Third-Party Risk Management (TPRM) Audits • Security Awareness Training Programs • Information Security Controls & Frameworks • Vendor Management & Communication • IT Asset Lifecycle Management • Symantec Security Console Administration • Firewall Management & Security Policy Enforcement • Windows Server (RBAC, User & Group Administration, GPOs) • IT Operations, Networking, & Patch Management • Backup, Active Directory, & Desktop Support • Network Uptime Maintenance, LAN & Remote Troubleshooting I am committed to leveraging my knowledge to help organizations navigate the evolving landscape of IT security and compliance.

In my role as an IT Compliance Specialist, I've been entrusted with ensuring that our organization adheres to regulatory standards while maintaining a secure IT environment. My responsibilities include conducting internal IT audits, overseeing compliance with regulatory requirements, and managing access to critical applications.Key Responsibilities:1. Internal IT Audit: I lead the internal IT General Controls (ITGC) audits to assess our systems and processes, identifying and addressing potential risks to ensure compliance and security.2. Regulatory Compliance: I monitor changes in regulations and industry standards, collaborating with teams to implement necessary updates to maintain compliance.3. Global Access Reviews: I conduct periodic reviews of global access using our revalidation tool, ensuring that user access aligns with business needs and minimizing unauthorized access.4. Application Access Management: I manage access to four critical applications using our IAM tool, implementing strict controls to safeguard sensitive data and maintain system integrity.Through my focused approach, I've contributed to enhancing our organization's security and compliance posture, ensuring the protection of our assets and maintaining stakeholder trust.