I am a Security and Compliance professional with expertise in managing multi-cloud environments and ensuring regulatory compliance across global standards.Key Areas of Expertise:Security Leadership:Develop, implement, and monitor security policies, standards, and tools.Manage security across multi-cloud environments (AWS, GCP, Azure) for applications, systems, and endpoints.Lead incident response efforts, including root cause analysis and remediation plans.Continuously assess vulnerabilities and develop mitigation strategies.Cloud Security:Oversee security posture in cloud platforms and services (e.g., Snowflake, MongoDB, Auth0).Collaborate with DevOps and SRE teams to secure CI/CD pipelines and infrastructure.Implement and manage security controls for workloads, applications, and sensitive data.Vendor and Corporate Security:Lead security assessments of third-party vendors to ensure compliance with corporate security standards.Conduct regular security evaluations and manage vendor relationships to maintain security controls.Customer Security Support:Address customer security inquiries and assist with RFPs and security questionnaires.Support sales and marketing by creating customer-facing security documentation.Data Security and Privacy:Protect customer data (PII) through encryption, DLP strategies, and access controls.Oversee endpoint security and ensure compliance with regulations (GDPR, HIPAA).Enhance email security controls (DMARC, DKIM, SPF) to prevent phishing and fraud.Compliance and Auditing:Lead security audits (ISO 27001, SOC 2) and ensure regulatory compliance.Manage penetration tests, vulnerability assessments, and remediation strategies.Maintain comprehensive documentation for audits and regulatory reporting.Collaboration and Training:Work with Legal, IT, and Engineering teams to embed security best practices.Lead security awareness programs and employee training.Build and maintain a security knowledge base for internal and external stakeholders.Additional skills:Win, Linux and MacOS troubleshooting.IT administration: ESXi, CentOS, Hyper-V, SW, FW(FortGate, Palo Alto, CheckPoint, WAF), Okta, JAMF, Intune