Highly motivated, experienced and knowledgeable Security Professional with proven expertise in:- IT Governance - Information Technology Controls Management; Risk Assessment & Control Frameworks Development / Implementation/Implementation.Working as Application Security Support Lead – Compliance and Risk Management from December 2019 to till dateDescriptionIT Control Compliance• Participate in the control scoping activities for the new scope of applications and environments scoped.• Support or spearhead onboarding of controls for new applications or new implementation of controls.• Administer the controls execution on all aspects of Sox, Data Privacy, Environmental controls, IRM activities, Client Data Protection, Information Security Management (ISMS) and Business Continuity Management (BCMS).• Document and maintain security strategies, plans, policies, procedures, and guidelines. • Maintain consistency with our company’s standards, requirements, and general industry best practices.Governance and Management reporting• Reports to senior management for any escalations to address security issues or incidents.• Monthly reports on the overall control compliance posture along with any actions for improvements.• Allocate resources and assign responsibilities to the team.• Conduct coaching or mentoring sessions with subordinates.Audit Management• Support the external audits performed by the Big4 as an audit manager.• Support Internal audits performed by Big4 as an audit manager.• Participating in the closure calls and identifying the action items and timelines coming out of the audit conclusion• Driving the remediation activities for any findings or observations raised as a part of Audits with a strict timeline• Documenting the evidence and supporting the re-test of the controlsRisk and Findings Management• Part of risk assessment for implementation of security controls for new scope of applications to be onboarded• Participate in the control scoping activities for the new scope of applications and environments scoped.• Support or spearhead onboarding of controls for new applications or new implementation of controls.• Support risk life cycle through finding management by tracking the life cycle of the arising risk till its closure by reducing the impact or likelihood of risk through controls implementation