Sargam Bansal Cism Ceh Lead Auditoriso Email & Phone Number

Washington, DC, US

Portland, Maine, US

As a part of the Enterprise Security team, I am responsible for PCI-DSS compliance for WEX’s corporate payments business. Currently responsible for ensuring compliance to PCI-DSS requirements, managing assessments and guiding engineering teams meet changing compliance requirements.

Bangalore, Karnataka, IN

• CyberSecurity projects management including -
• FFIEC cyber-security requirements advisory under OCC purview.
• J-SOX, GDPR and PCI DSS advisory compliance's for EMEA and Americas operations.

Pune, Maharashtra, IN

• As a Cyber Security and Regulatory Compliance specialist, took over multiple roles for the Enterprise Risk Management Team and internal Information Security Team:
• Supported a Global telecom client to successfully accomplish Payment Card Industry Card Production (PCI-CP) Certification and GSMA regulatory security audit for the first time. o Directly worked on Identity Management.
• Assisted a healthcare customer successfully implement security controls inline NIST SP 800-53 Rev. 4 o Performed Gap Assessment and generated Plan of Action and Milestones (POAM)
• As an Information Security Manager, ensuring compliance to set standards and audits for multiple internal customer projects.

Dubai, United Arab Emirates, AE

• As an Information Security leader for the organization, implemented Information Security and governance framework based on ISO 27001 followed by preparing and successfully clearing a SOC 2 Audit which included
• Leading and guiding cross functional teams to understand, implement and ensure security requirements are fulfilled.
• Establishing Information Security Policies, Procedures and Processes
• Defining security requirements and liaison with other departments for implementation
• Conducting internal security assessments and technical reviews like Read Team Assessments
• Defining Risk Management and Security Incident Response/Management Programs

Chicago, IL, US

Executed multiple Information Security Audit engagements in collaboration with US teams around testing the control effectiveness for SOX ITGC, SSAE16 (SOC1) and SOC 2 Reports.

Mumbai, Maharashtra, IN

As an Information Security Consultant, led, managed and even delivered multiple Cyber Security projects for global clients around SOX ITGC, PCI-DSS, SOC 2 and Red Team assessments including Networks and Systems Audits. Worked on a variety of industry domains during this tenure including Healthcare, Manufacturing and Energy Sector.

Noida, Uttar Pradesh, IN

• As the Information Security Manager, established the information security and governance framework and successfully achieved favorable results in SOX ITGC Audit for the company.
• Developing and implementing robust cyber security framework in line with business initiatives to ensure continued Cyber Security and Compliance in time bound manner.
• Facilitate information security governance by developing Information Security strategy and security architecture inline ISO27001, Indian IT Act 2000, IT Amendment Act 2008 and energy sector regulations.
• Liaison with internal departments to provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls and establishing Risk Register and Risk Management Program.
• Establishing security incident management program to provide security incident response capabilities to the organization.
• Defining and Implementing Security Policies, Procedures, Processes, Guidelines and Standards.

Bangalore, Karnataka, IN

• As a part of global consulting team, Responsible for delivery and execution of Information Security projects in following areas:
• Information Security Risk Management
• ISO 27001 Implementation and Internal Audits
• Business Continuity Planning and Disaster recovery (ISO 22301 and BS 25999) Implementation
• Application and Infrastructure Security Assessments
• Unified Compliance Frameworks and Integrated Management Systems

Noida, Uttar Pradesh, IN

Being a part of Global Security Operations center (SOC), Coordinated and led multiple teams regarding compliance of ISMS, ITSM & QMS based on ISO 27001, ISO 20000 & ISO 9001 standards. which involved - performing Risk management, compliance management, Policy enforcement, artifact and evidence collection, Conducting Internal Audits and Coordinating.

Master Of Science - Ms, Cyber Security And Law

Bachelor Of Technology - Btech, Computer Engineering

Associate, Computer Engineering