Experience Conducted security review and architected security design of Salesforce and Microsoft Cloud services. Worked with Salesforce and MS team to ensure Security Compliance with FEDRAMP and CMMS/EISSG6 requirements. Involved in strategic decision-making process of moving from Public Cloud to Govt. Cloud that includes security, compliance and regulatory requirement analysis. Conducted privacy analysis and encryption reviews, designed the approach and developed Cloud Risk Management program using frameworks ISO 31000 and OCTAVE, and guidelines SP 800-30, COSO, SEP, and NSA-IAM. Reviewed the security strategy for AWS Identity and Access Management (IAM) Role for community platform systems. Worked at oil and gas corporation on implementing Common Cloud Security dashboard using Splunk and IDS/IPS tools.  Experience in implementing Cyber Security Framework and Incident Management Program including Media communication, etc. for Cloud Services Corporation. Performed regulatory compliance implementations and reviews in the following areas: Gramm-Leach-Bliley Act (Privacy), FFIEC, Red Flags, Safe Harbor, HIPPA, NERC, Regulation GG, 21 CFR Part 11, SOX, NIST, PCI, FedRAMP, EISSG, CMMS, etc. Data privacy reviews based on EU (EU Laws, Safe Harbor, etc.), Germany laws, and US Regulations/Compliance Requirements (GLBA, HIPAA, State, etc.), ISO Standards, etc. for SAAS applications. Experience with cloud provider selection including requirement analysis, RFP, Vendor Selection, cost-benefit (ROI) analysis both in SAAS as well as In-house implementation.  Experience conducting quality assurance reviews, data analytics and data audits for consistency, completeness, integrity and confidentiality. Suggested suitable remediation majors including validation techniques, remediation and process reviews, control and workflow designs, etc.