Information/Cyber Security/GRC Projects: Cyber Security Program Development Plan Project - ISO 27001-2013:Governance, Strategy, Roadmap, Policies, Processes, Procedures, Standards and Guidelines, Vulnerability Management, Email Gateway, Web Gateway, Intrusion Prevention System, Data Loss Prevention, SIEM, Endpoint and Server Protection - VSE, Datacenter, DR Projects, etc.

• Enterprise Information Security, Governance, Compliance & Risk Management. • Handled regulatory compliance projects - 2FA, PCI-DSS Certification, migration to Version2 & re-certification. • ISO/IEC 27001 Re-certification. Information security reviews for change/new system / application / database / infrastructure components in IT infrastructure.• Information security review of Enterprise IT Operations. Review of Policy documents.• Source code review of infrastructure components, ISRP, Key Management & ESCROW. • Development of policies, standards and procedures.• Systems/server review - Oracle/Solaris and Windows.• Ethical Hack for Online Banking applications and Vulnerability Management.

Research based technical customer support on BMC® Performance Assurance® Suite of products dealing with Server System Performance and Capacity Management solution to ‘Fortune 100’ Customers within SLA. Comprising Perform Console, Agent, Analyze, Manager, Visualizer/Automator, Perceiver, Predict and Exception Detector for Distributed Systems (UNIX: Solaris - DSD, Container/Zones], AIX - HMC, LPAR, SPLPAR, DLPAR, HP-UX - nPAR, vPAR, Linux - (RedHat, SuSe), Windows, VMware) AS/400 (iSeries), Mainframe and Databases - Oracle/Oracle RAC, SQL Server, MS Access.

Information Security Audit: Current state assessment, Asset based risk assessment, Vulnerability assessment, Gap analysis based on BS 7799, ISO/IEC 27001 Standards.Risk Management: Review & formulation of IT security policies and procedures, Review and design of security architecture, OS hardening, patching and fixing.Information Security Projects (BS7799/ISO/IEC 27001)Project 1 – A leading Stock Exchange in India:• IT security policies and procedures formulation and implementation.• Designing and implementing the various records as supporting documents for the implemented procedures.• Review of Business Continuity & Disaster Recovery documentation and DR site inspection.• Internal Audits.• Execution of migration project: BS7799 to ISO/IEC 27001.• Assets identification and classification (AIC).• Risk Assessment - Threat & Vulnerability Analysis.• Risk Treatment/Mitigation. • Network security architecture report.• Preparation of Statement of Applicability (SOA).• Training - Senior and Middle Management, End users.• Closing of non-conformities, corrective and preventive actions.Project 2 – A premier Securities Company: GAP analysis, Risk Assessment, Security architecture review, Formulation of policies and procedures, Execution of migration project: BS7799 to ISO/IEC 27001.Project 3 – A Chemical Manufacturing Company: GAP analysis, Current state assessment, Security architecture review.

BS7799 Certification and Migration to ISO/IEC 27001 Certification:• Gap analysis based on BS7799 and ISO/IEC 27001 Standards,• Risk Management: Review & formulation of IT security policies and procedures, • Review and design of security architecture, OS hardening, patching and fixing,• Information security policies and procedures formulation and implementation,• Designing and implementing the various records as supporting documents for the implemented procedures,• Review of Business Continuity & Disaster Recovery documentation and DR site inspection,• Internal IS Audits (BS7799 & ISO 27001),• Execution of migration project: BS7799 to ISO/IEC 27001,• Assets identification and classification (AIC),• Risk Assessment - Threat & Vulnerability Analysis,• Risk Treatment/Mitigation, • Network security architecture report,• Preparation of Statement of Applicability (SOA),• Training - Senior and Middle Management, End users,• Coordination for the closure of non-conformities, corrective and preventive actions.

• Systems & Security Administration of SUN Enterprise, Cluster Systems in the e-Banking Infrastructure.• Development, enforcement of Policies, Procedures, Standards and Guidelines.• Security Administration and Monitoring.• Admin/monitoring of ISS Realsecure IDS/IPS & Cisco Secure Intrusion Detection System/Cisco Works.• Administration of RSA SecurID server.• Admin. & Monitoring of Websense, Clearswift MIMEsweeper, McAfee E-1000 Appliance. • Periodic Vulnerability Scanning of Servers, Network and Databases with ISS System Scanner, Internet Scanner, Database Scanner and E-eye Digital - Retina Scanner.• Monitoring and Administration of Consul Insight Security Manager.• Administration of iPlanet / SunONE Web / Proxy Server.• Coordination with Data Center- Operations, Technical Support, End User Support, Quality Assurance, Development and other Business units for the Administration, Implementation, Migration and Upgrade of various Software Projects, Patch Management, OS hardening and fixing known vulnerabilities.• Physical and environmental security review.• Security awareness campaign - user and management level.• Penetration testing & Vulnerability Assessment coordination Securioty Vendors. • Administration of CISCO PIX 525 and NetScreen (NS 5200) Enterprise HA Cluster firewalls.• Project Management: - Implementation/Migration of SunScreen Enterprise firewall to NetScreen.- Migration of ISS IDS/IPS to latest versions.- Implementation of Websense, Consul Insight Security Manager, SSL Accelerator and BMC® Patrol®.