I am an IT security professional with an overall experience of 15+ years of which 11 years being information security experience spread across various areas like IT security audits, third party risk management, risk and compliance, gap assessments, ISO 27001, risk management, UTM (unified threat management) configuration & administration, device performance testing and help-desk support. I come with extensive IT experience and a progressive approach towards risk management practices to more efficiently evaluate and design cost-effective control structures that align with the business' risk appetite and have performed various risk based audits for business continuity management, Information Risk & Compliance Management, data privacy, Applications and datacenter audits. I currently hold the CISSP (Certified Information Systems Security Professional) and CISA (Certified Information Systems Auditor) certifications.