• Valued contributor within the risk program, effectively overseeing the risk register and proficiently resolving over 100 risks from the backlog.• Key contributor to the risk assessment aligned with CIS 18 controls.• Performed numerous stakeholder interviews to ascertain process gaps and identify potential risks.• Engaged in the annual third-party risk assessment, evaluating the security posture of various vendors.• Performed vulnerability impact assessments for third-party entities.• Proficient in utilizing the CIS CSAT Pro and Centraleyes tools for risk assessment purposes.• Implemented an automation rule within Jira to update risk ratings according to impact and probability scores.• Drafted the quarterly service reports and updated the leadership on the service updates.

• Worked as a key team member in drafting 1300+ pages PCI DSS - ROC (Report on Compliance) for a major telecommunications client based in US: • Analyzed and documented the observations found during the testing and status of each requirement. • Summarized the entity’s business along with the processes, technology and the people involved in the scope.• Performed NIST CSF maturity level scoring & drafted assessment scorecards for NIST CSF functions within timelines for an American sporting goods retail company and US MedTech company.• Was an important team member of Cybersecurity Risk Assessment project for an US client.• Conducted a thorough CIS Top 20 Controls based assessment for a major apparel client based in US.• Was an important team member in the internal practice development initiatives of the team related to compliance and automation activities. • Performed a role of news editor for PCI monthly newsletter.• Contributed to the new joiners bootcamp training on information security and PCI DSS.• Participated in multiple training sessions related to PCI DSS, AWS Cloud, ISO 27001, NIST CSF, HITRUST, Compliance Reporting and Tanium.

• Was a critical team member of a comprehensive PCI DSS assessment project for a client who is a leader in the US telecommunication sector: • Took ownership and handled the assessment of 40 out of the 120 in scope application(s) and network appliance(s) assessment over the 5 sprint cycles. • Reviewed the evidence provided by the client and performed detailed controls testing against applicable PCI DSS controls. • Tested the client environment leveraging tools such as Splunk, Cherwell, Hyena and Change auditor. • Documented and reported elaborate observations of the controls testing results to the client and internal stakeholders. • Collaborated effectively with the internal team (offshore and onshore) and client on the deliverables of the assessment ensuring turnaround of deliverables within specified timelines. • Trained the new team members on the PCI DSS standard and project. • Worked on preparing the training materials for PCI DSS v4.0 and updated the project related documents to PCI DSS v4.0.• Handled Amazon QuickSight engagement for an important telecommunications client based in the US. Created insightful dashboards utilizing Amazon QuickSight and made necessary updates based on client requirement and feedback.