Defining & implementing an enterprise wide security architecture framework incorporating industrybest practicesDefining & implementing a robust security assessment & testing framework for all new & existingapplications.Defining a calendar for vulnerability & penetration testing to ensure vulnerabilities are tracked &closed in time-bound mannerUpdating the senior management for any critical issues noted in VAPT or application testing & ensureremediation plan is defined. (as part of periodic management reviews)Implement adequate data protection mechanisms for access of critical data through various channels,access mechanisms & to multiple systems.Ensure periodic review and monitoring of adherence to identity & access management policy andprocedures, including exception management.Create a robust incident management process covering incident reporting, analysis, response,escalation matrix and remediation.Continuous monitoring of critical systems using various service and tool based mechanismsCollaborate closely with Bank’s incident management team for detection, response & remediation ofcritical threats/vulnerabilities reported.

• Designed and Implemented ISO 27001 - Security Policies & Procedures• Designed policies for Incident management, Change management, and Configuration management as per the ITIL framework.• Conducted periodic Risk Management program based on ISO 27005 to cover IT Infrastructure, Physical Security and Environmental Conditions and provide actionable report to CISO.• Performed Internal audits to access ISO 27001 controls.• Assess IT Disaster Recovery plans / Business continuity plans periodically.• Prepare Compliance reports for complying with Service provider guidelines and reporting to Government agencies.• Implementing, Monitoring and Managing of Corporate Core Switch, QOS Device, Firewalls, IPsec/SSL VPN and associated Network Equipment• Management of IP VPN & MPLS VPN Networks across branches all over India• Ensure 24 hour availability and security of the network and infrastructure.• Evaluation of upcoming technologies and mapping to customer’s business requirements • Designing & implementation of major network firmware/hardware changes and repair activities in accordance with Change Management procedures.• Evaluated multi-vendor devices for protection against advance cyber threat (APT’s.)• Responsible for monthly analysis of Internet/WAN link outages & coordination with respective vendors for smooth services as per the SLA.• Responsible for effective backup of all the network devices and providing failover solutions for remote LAN/WAN configurations & Internet setup.• Participated in all phases of system procurement including requirements gathering, system assessment, vendor collaboration and coordination with Finance.