Sarah P Email & Phone Number

●7 years experienced Cyber Security Professional with well-developed skills in IT GRC – Internal IT Audits, Risk Assessment and Security Frameworks; along with BCP / DR, Employee Training in Cyber Security and Business Analysis.●Implemented and Audited IT controls and security frameworks such as NIST, ISO 27001/27002, PCI-DSS, GDPR, PIPEDA, Data Information and Privacy, Identity and Access Management. ●Thrive towards continuous improvement work, have strong interpersonal skills. Excellent customer service skills, Excellent Negotiation Skills, Ability to learn continuously. ●Core competencies include documenting and reviewing Policies and Processes; Risk Management and Compliance, Information Security Management System (Implementation, Auditing, and Continual Improvement), Third-party risk management, IT General Control Testing, Data Privacy, Business Continuity Management (Planning, Implementation, and Management), Disaster Recovery, Project Management, End User Training and Awareness for cyber security, and DLP Incident Management.●GRC Tools – Beauceron Security, ServiceNow GRC, Splunk, SailPoint and DynaTrace. ●Experienced in Microsoft Office tools such as MS Excel, PowerPoint, Word and SharePoint. ●IT Governance experience includes design of the cyber security program and oversight over its execution, implementation of NIST, ISO 27001 control frameworks, developing information security policies/standards, GRC implementation and maturity assessment of IT processes.●IT Risk experience - worked on Risk Register, risk assessment methodology/framework, risk identification, risk remediation and risk reporting of technology, process, projects, and special initiatives. ●IT Audit experience includes planning and executing of IT audit engagement, risk-control assessment, third-party controls review, IT general/application controls testing (IT SOX compliance), etc. ●Excellent Documentation skills Documented Cyber Security controls, policies, frameworks, Risk Register, RACM, Audit plan, Audit report, CAPA, Business Continuity Plan (BCP), Disaster Recovery (DR) and Requirement documents - User stories, SRS, BRD, Wireframes, Use cases.

• 

  Osmania University

  A