As Director, Trust-Compliance and Business Operations, I am responsible for SSAE-18/SOC1 Type II, AT-101/SOC2 Type II, TrustArc (TRUSTe) Privacy Seal, GDPR, and HIPAA BAA certifications.Internal Audits, Information Security Management, Business-Continuity & Disaster Recovery, Security Incident & Data Breach Management, Internal and External (Vendor) Risk Management, Client Security Assessments, Pre-Sales IT & Compliance Demos and Contract Negotiations are my other key responsibilities.

Governance, risk and compliance adviser responsible for PCI-DSS, FedRAMP, ISO-27001, SSAE-18/SOC1, AT-101/SOC2 certifications and developed Common Controls & Risk Management Framework.

As a Risk Adviser I was responsible to streamline and triage third party risk assessment program covering more than 2000 vendors for Visa. Also worked on key international project risk assessments.

As a Risk and Compliance Consultant I was responsible for risk evaluation and mitigation for top of the line online products like 3D Secure, Knowledge Based Authentication (KBA), Fraud and Digital Risk Management (Adaptive Authentication).

As a Risk Adviser, I was responsible for enhancing the Supplier Risk Management Program to comply with Data Privacy, GLBA, Sarbanes-Oxley, FACTA Red Flags, HIPAA, PCI-DSS, and Operational Risk.

As a program manager, I was responsible for IT Infrastructure and Operations Integration Project of Nortel’s MEN business with Ciena.

As a project manager, I was responsible for Etisalat’s new mobile services business information security management.

As a Security Program Manager, I was responsible for Security and Compliance Program Management for BT’s Retail Technology Group.

As a Security Project Manager, I was responsible for implementation of ISO-27001 program for National Securities Depository Limited (NSDL).

As Information Security Manager, I was responsible for ISO-27001 Implementation, New Data Center and IT Infrastructure Deployment, and Corporate IT Project Management.