 Enhanced and enforced comprehensive Information Security Strategy, Policies, and KPIs, aligning with the organization's key business objectives.  Managed the compliance of enterprise-wide security architectures and frameworks (PCI DSS, ISO 27001, GDPR, NIST), aligning with business objectives, regulatory requirements, and industry best practices. Led and developed high-performing security teams, and optimal usage of budget and resources to meet security objectives and project goals. Conducted comprehensive security assessments, including network architecture reviews, vulnerability assessments, data protection impact assessments, security Audits, and Identity and Access review exercises across the organization’s IT infrastructure, and applications.  Developed and enforced robust security policies and procedures, ensuring compliance with international standards and performing regular business and thematic reviews. Strengthened infrastructure security by implementing Security solutions including Firewalls, Threat Management, IPS/IDS, EDR/XDR, WAF, DLP, and PAM according to best practices. Conducted risk assessments with a risk-based approach, identifying and mitigating risks effectively, and maintaining a compliant risk register. Developed and implemented incident management plans, coordinating response efforts between CSIRT, IT teams, and stakeholders to manage security incidents and breaches. Conducted third-party vendor assessments, evaluating security vendors, tools, and products to address organizational security needs. Promoted a security culture through awareness and training programs, educating employees on best practices and compliance requirements.

 Managed IT Security Program assessments, audits, and Incident Management Programs, ensuring regulatory compliance and enhancing incident response efficiency. Designed internal security policies, managed resources, improved continuous service, IT security, and risk management, and coordinated with vendors ensuring SLA adherence. Managed IT unit audits, assessments, controls testing, and vulnerability assessments, identifying and mitigating critical vulnerabilities. Administered IT Infrastructure Security Products, enforcing best security standards, leading to an improvement in security posture. Ensured compliance with ISO27001/27005 and NIST Risk Management Framework, enhancing ICT vertical security Provided ongoing guidance and project management for information security programs, advising on compliance, resulting in successful security implementations.

 Engineered and implemented resilient, highly available, secure network infrastructure, achieving maximum uptime and reducing network-related incidents. Implemented Network & System Security controls using IDS/IPS, restricted malicious websites, spyware, and content/URL filtering on firewalls thus reducing security threats. Assisted in network security assessments, audits, and vulnerability programs, and implemented system & network-level security controls for mitigating critical vulnerabilities. Managed multivendor security products (networking, SIEM, SOAR, DLP, Endpoint security) as per best practices to improve security efficiency. Ensured a secured network through a policy-driven approach, maintaining strict access controls, and achieved a significant reduction in unauthorized access incidents. Implemented secure network practices based on critical control recommendations and regulatory guidelines, enhancing network security compliance. Collaborated with IT, Business, Procurement, and HR teams to implement best practices in security and privacy, resulting in an improvement in cross-functional security awareness.

• Monitoring and managing the entire domestic & International branch Network of HBL (2500+ WAN nodes) using different Networking tools.• Carrying out configuration of branches on various Core, Regional and Branch level Routers as Cisco (7200, 3900, 2900,1700 & 800), Juniper Firewalls (SSG-550, SSG-140, SSG-20, SSG-5).• Designing, Planning & Implementation of new coming site regarding device, media & bandwidth.• Carrying out L2/L3 configurations on various Cisco Routers and Switches.• Implementation of Site-to-Site IPSec VPN, DVTIs on CISCO & Juniper devices.• Implementation of AAA, QoS, policies, SNMP over branch end devices.• Sound knowledge and experience of working on miscellaneous wired and wireless media as DSL, VSAT, CDMA, WiMax, Fiber link, DXX and MPLS.• Installation/ Up gradation of IOS on Cisco/Juniper Routers and Switches.• Extensive knowledge on Network technologies like VLAN, STP, VTP, Ether channel, RIP, OSPF, HSRP, GLBP, ACLs, NAT, VPNs etc.• Troubleshooting of branches devices regarding day to day connectivity issues.• WAN Link Support for nationwide ATM’s and Banking Application servers.• Document all network related problems and provide remedies for the same.• Coordinating with vendors for various Connectivity issues, Link Deployments and Media activities.• Extensive use of monitoring tools as Solar Winds, WhatsApp Gold and Net Flow.

 Achieved 99.5%+ network uptime by implementing advanced network monitoring tools and conducting comprehensive training sessions for support and core teams. Led major network optimization projects, including SD-WAN and Firewall migrations, reengineering passive networks, and enhancing network performance. Identified and implemented security products/tools, collaborating with IS teams, hardening infrastructure andapplications, and reducing security incidents. Coordinated and tracked all IT and security-related audits, ensuring timely completion and successful compliance with regulatory standards.

 Designed enterprise network for clients, & implemented network and security products, enhancing network reliability. Managed projects & continuous operations for clients, ensuring client satisfaction and on-time project delivery. Provided on-call and onsite support, reducing downtime and improving client response time.