- Assisting OCISO in SRC functional area in performing Security Compliance Assessment for Amazon services provisioned on On-premises and AWS Cloud Platform of different engagements.- Assessing Access Management, PAM, Cryptography, Change Management, Incident Response Plan, Change Management, SDLC process, Firewalls and NACLs, Capacity Planning, Auto Scaling, Peak readiness, Audit logging & Monitoring, Log group configurations and retention, VAPT review for criticalapplications, DB backup and restoration tests, Operation readiness exercise, BCP & DR Simulation exercises, Patch Management, Threat Modelling, code scans and production deployments controls as part of risk & compliance checks.- Creating mechanisms for compliance monitoring, reporting, and maintaining documentation for the findings and exceptions.- Involved in implementing the controls to create a common integral framework to perform control testing for applications & services - Review and follow up on the corrective actions in closing the finding- As a Manager under Risk Assurance portfolio handling a decent team size which includes Seniors and Associates to conduct Security Maturity assignment to one of the manufacturing industries- Evaluated key areas including IS Governance, Cloud Governance, Risk Management, Access Management, Data backup Strategy, Incident & Change Management, BCP/DR, Patching, Capacity management, Data Security & Network Domains processes- Drafting of the Risk Control Matrix (Issue Tracker), Draft & Final reporting with gaps and recommendations.- Performed Physical visit to Data center and assessing the Data center controls- Created a whole new approach for ITGC & Cloud (snowflake) assessments for clients and helped organization in drafting the proposals.- Hands on experience in assessing AWS, Azure and Snowflakes environments- Driven teams in achieving required skills and provided trainings on various GRC areas.

- Worked as a Security Architect and successfully led a team in the Vendor Risk Management process for critical vendors.- Conducted a thorough review of vendor network diagrams and collected artifacts based on domain processes.- Executed risk assessments, identified potential risks, and collaborated with vendors to implement effective mitigation strategies, ensuring compliance with industryregulations.- Played a key role in reviewing and negotiating contractual agreements with vendors, with a specific focus on security clauses, data protection, and incident response protocols.* Lead Risk Consulting* Security assurance and assessments* Client Due Diligence* Cyber Security strategy implementation* Information Security frameworks implementation* IT Control testing* Risk & Compliance member* IT General Controls.* Third Party Risk Management* Corporate Security on enterprise level

• Provisioned and supported On-premise & Cloud environments, handling security configurations and OS hardening requirements for Red hat Linux VMs.• Architected and developed cloud infrastructure for SAP environments on Google cloud & Azure platform.• Led migration, engineering, and administration teams, designed Shared VPC and service projects on two regions.Proven expertise in building and executing IT Disaster Recovery Programs, including full data Skilled in conducting Business Impact Analyses (BIA) and integrating disaster recovery into vendor assessments, security architecture reviews, and technology frameworks.Developed and executed Disaster Recovery (DR) plans, including recovery strategies and DR team coordination, by collaborating cross-functionally with diverse teams to ensure seamless implementation and organizational resilience.Streamlined ITGC audit processes by developing a centralized document repository, improving access and response times for audit requests.

-Involved in Level 1 and 2 Support.-Involved in production support on-call.-Installed and Configured IBM WAS & WMQ on Windows and Linux systems.-Support the WAS & WebSphere MQ infrastructure on the production environment.-Proactively monitor the middleware and Perform daily on call tasks (checking errorlogs, Fail overs of applications & queues) to maintain a healthy system.-Installation and configuration of Tomcat application servers for reporting