Audit & Compliance Developed company internal Information Security Policies  Ensured compliance with various standards and regulations including SAM, ITGC, PCI DSS and Cyber Security assessment. Conducted cyber security risk assessments and penetration testing to identify and address vulnerabilities in IT systems and infrastructure. Reviewing hardening documents and comparing with CIS benchmark Performing third-party vendor risk assessments User Access review of different IT infrastructure & applicationsEnd Point & Data Security Ensuring end-point compliance (Antivirus & Patching) achieved as per the policy Managing end point security like (Anti-Virus, DLP, DNS) Monitoring critical data leakage using DLP and highlighting to the CXO’s. Help respective team to update the data keywords on specific time internal for DLPApplication Security Verifying all the internal application configuration as per the SDLC Performing application VAPT with the help of external partners  Follow-ups with the application owners to close all the VA & PT findings within given timeline Performing backup restoration for critical applications on quarterly basisPhishing & Information Security Training Conducted phishing exercises to simulate real-world cyber-attacks and assess employee awareness and response. Developed and delivered phishing awareness training sessions to educate employees on identifying and reporting phishing attempts.Management Driving monthly service reviews & evolution forums with client & leadership, integration with project counterparts including proactive problem management, daily change calls, incident management Follow-up’s audit finding and make sure to close on the given timelines. Member of Change Management Body (CAB) responsible for discussing and overseeing all IT related changes

• Conducting PCI DSS Certification for the Organization• Managing ITGC audit with the third party vendors• Managing McAfee Data loss prevention tool• Management and oversight of Application Security Assessments stages from Identifying the vulnerabilities till final remediation’s or closure • Vendor management • Responsible to complete DR drill activity in every quarter without impacting business function• Coordinated application deployments and launches and scheduling and execution management for seamless implementation• Managing production support within SLA• Involved in project planning and requirement gathering• Responsible for creating weekly and monthly project status and issues on regular basis to the top leads • Monitored project progress and ensured project remained on track and deadlines were met• Closely collaborated with business team to identify and quickly address problems

• Managing Production support and development. • Involved in Project Planning and requirement gathering.• Responsible for Code Audits and taking corrective measures in exceptional cases.• Managed a medium-sized team of Developers with similar competency• Monitor project development as per the project plan.• Create Effort estimation.• Informed project status and issues to clients on regular basis.

• Managing Production support and development. • Involved in Project Planning and requirement gathering.• Responsible for Code Audits and taking corrective measures in exceptional cases.• Managed a medium-sized team of Developers with similar competency• Monitor project development as per the project plan.• Coordination on UAT testing.• Conducted training.

• Responsible for designing and developing UI such as SharePoint webparts, User control and application pages.• Responsible for branding site, creating master pages, CSS and page layout. • Responsible for Client coordination and sharing requirements within team• Preparing Test Plans.Jr. Software Engineer, Astech Ltd., Mumbai ( JAN 2006 - March 2007)• Active ASP.net developer throughout the entire term.• Preparing Test Plans.