• Lead audit teams and participate to evaluate the design and the operating effectiveness of Information Technology and Cybersecurity processes• Leading the Audit, Risk & Compliance team for European clients (Locations covered- India, Sweden, Finland, Poland & across UK)• Responsible for end-to-end management of ISAE 3402 and ISO 27001 External Audits• Designing & implementation of IT General Controls (ITGC) at organization sites globally, for SOX as well as risk-based audits• Develop technology audit testing plans and sourcing requirements• Support technology audit risk assessment process • Develop strong relationship with internal leadership and clients• Training and Awareness program management• Information Security Incident tracking-handling-logging and closure• Key Internal Audits:Access Management, Human Resources Control Management, Physical & Logical Access Management, Vulnerability Management, Patch Management, Data Protection, Network Devices, and Vendor Onboarding, Security Incident Management, Change Management, Problem Management, Policy Breaches.

• Conduct information security audits to assess adequacy, effectiveness, and efficiency of implemented internal controls as per the organization's infosec policies and ISO 27001 standard and applicable data privacy mandates.• Discuss audit findings and recommendations with auditees; periodic follow up of all action plans and monitoring the timely implementation of the same• Perform gap assessment, identify key areas and propose appropriate controls to various internal teams to manage the identified risks• Suggest/develop effective processes to remediate compliance gaps• Reviewing process documents, flows, and templates to ensure alignment with ISO27001 standard• Devise mechanism for bringing improvements to security posture; based on RCA/trend analysis of internal/external audits• Delivering trainings to create awareness on cybersecurity practices, data privacy laws and industry standards • Assisting/advising teams in review/implement privacy controls as required• Ensure that there is complete visibility and traceability of data flow in and out of the organization. Collaborate with various cross functions like legal and compliance, HR, etc. in the administration of privacy directives, laws, and their implementation status in the organization

• Support ISMS Implementation & ISO 27001 Certification• Risk Management• Drafting Information Security Policies and Procedures• Review and Evaluation of Security documentation• Impart Information Security Awareness Trainings• Implementation & maintaining compliance to ISO 27001 standard for organizations• Conduct Internal Audits for Access Management, Human Resources Control Management, Physical & Logical Access Management, Vulnerability Assessments, Penetration Testing, Device Hardening, Log Review, Review of Documents, Network Monitoring, and Reporting.

• Participate in Program and Project Management of all the different Information Security Projects • Performing Information Security reviews• Follow up on Exceptions and Incidents across the Organization• Handle Internal Audits for ISO 27001 Compliance requirements• Handle Audits from Clients and track remediation/issues identified by clients

• Conducting Internal Information Security Audits• Facilitating external and third-party audits with timely gap closures• Maintaining compliance to ISO 27001 & PCI DSS• Preparing Information Security Matrix

• ISMS Implementation & ISO 27001 Certification Management • Drafting Information Security Policies and Procedures• Review and Evaluation of Security documentation• Impart Information Security Awareness Trainings