Planning, preparing, coordinating, and executing audits to evaluate the adequacy and effectiveness of controls within the Information Technology and security covering 300+ projects.Conduct an initial assessment to identify current security practices, vulnerabilities, and areas where improvements are needed.Expertise in creating, implementing, and maintaining ISO 27001, PCI DSS, SOC 1, SOC 2 standards across multiple locations and subsidiaries.Skilled in managing internal audits, vendor and client assessments, and conducting thorough risk assessments.Experienced in implementing Group Audit's risk-based methodology, focusing on thorough coverage of infrastructure, application technology processes and the cyber technology environment, along with continuous risk assessmentsthrough structured evaluations to strengthen overall risk management practices.Experience in audit findings and identify control weaknesses in collaboration with stakeholders and assist withdeveloping management action plans to address identified gaps.Undertaking audit assignments, drafting and consolidating audit reports for review by audit management and facilitating issue tracking and validating the closure of audit findings.Experienced in conducting audits and security assessments to ensure IT governance compliance with regulatory and International standards.Skilled in analyzing IT risks from contemporary threat vectors, with a strong background in technical and process management within enterprise environments.Conducting periodic reviews on application assessment, network configuration, firewall configuration, ruleset review, database access control, operating system, asset management, antivirus and DLP controls, vulnerability management controls, data protection controls and cloud infrastructure.Evaluation of technical solutions, taking security considerations into account (on-premises, third-party apps).Conducting information security awareness sessions & training.