• Representing the Europe and UKIMEA region for Cyber GRC requirements.• Part of implementing Integrated Security Control Framework consisting of abstract of ISO 27001, NIST & CIS• Responsible for managing Microsoft Purview portal. Automated discovery and cataloguing of data assets across different data stores. Automatically classify and label sensitive data, helping organizations comply with data protection regulations and internal policies.• Configured DLP and Insider Risk (IRM) policies in accordance with the business requirement.• Managing global regional compliances like Cyber Essential Plus (UK), ENS (Spain) and GDPR (EU)• Established Cloud Security Governance by developing RACI, CSPM tool and regular reporting structure. Work closely with cloud team and other stakeholders to remediate the cloud findings timely.• Conducting Risk assessments on organizations critical systems and reporting to senior management for review and feedback.• Supporting business on various confidential projects like Nuclear, Water, energy, railways, highways, etc.• Conduct Third Party Risk management by partner tiering, risk- based assessment, tool implementation for real time monitoring of critical partners.• Running a global security awareness program which includes phishing campaigns, online e-learnings, news articles, quarterly virtual sessions.• Continuous Vulnerability management using VM platforms. Track the digital footprint of the organization and findings reported by Security Scorecard. Report the findings to the stakeholders for remediation and maintain a secure score.• Supporting external customers audits

• Identification & assessment of Risk associated with Information & Technology landscape.• Cloud Security Risk Assessments - Security posture management audit and monitoring on AWS and Azure cloud infrastructure using Posture management tools like CSPM, CWPP. Cloud infra security assessments. Cloud Threat alert assessments• Vulnerability Assessment of different company assets using tools like Qualys, Nessus, Nipper.• Continuously monitoring and managing security incidents and alerts received from security solutions like EDR, CSPM, ATP, Azure defender, Security center, Smokescreen (Zscalar),AWS hub, trusted advisor etc• Technical Security Assessments - Ad-hoc security and configuration reviews on critical assets and application to compare them with Best Practices Frameworks.• Threat Intelligence and technical research - Monitoring global information security alerts and news. Checking applicability to company network, engaging with respective stake holders to mitigate the risk. • Security Product evaluation, POC's as per requirements on security posture improvements

● Managed entire IT infrastructure of the company which includes AWS cloud services, WAF, ALB, Firewalls, IP-PBX, On premises servers.● Managed O365 Email infrastructure.● Framing IT Policy, IT Strategy, IT Security policy, periodic revision, and addition in the policy as per the upcoming requirements.● Assist all the group companies in deciding and implementing the right technology in the company.● Successfully migrated servers of all the group companies hosted on multiple AWS accounts at different regions to single AWS account. Few on-premises servers migrated to AWS. ● Successfully setup DR for AWS servers to another region using CloudEndure with RPO of few seconds● Finalized the IoT solution for Smart irrigation system for bigger farms using Soil Moisture Sensors and Automatic weather station.

• Successfully migrated in-house applications/servers on Microsoft Azure cloud with High availability• Cloud-based email setup and collaboration with hybrid solution Microsoft O365 and low-cost SmarterMail • Branch Rollout on MPLS connectivity to centralized the warehouse operations and security• Datacenter restructuring and network setup• Implemented server virtualization on VMware ESXi 5.0 with High availability setup, removed all physical servers and consolidated into one Blade server• Implemented Sophos & Gajshield Firewall with WAF, Sandboxing, IDS/IPS to enhance the network security.• Entire IT infrastructure setup at new office locations across India.• CCTV surveillance setup across all PAN India warehouses

• Successfully implemented Blade Server and SAN box architecture which includes migration of physical servers to virtual servers using VMware 4.0• Successfully upgraded Domain controllers from Windows 2003 to Windows 2008 ensuring smooth transition and operation• Successfully implemented ISO 27001 in the organization and follows the process

• Successfully implemented ISO 27001 in the organization and follows the process• Successfully installed Exchange 2007 in the organization and migrated all the mailboxes onto it.• Successfully implemented an environment of Active directory & domain controller through Windows Server 2003 operating system and implemented group policies