

Cyber security professional with over 3.5 years of experience specializing in areas such as ISO 27001:2022 Implementation Services, Cyber Maturity Assessments, Security Assessments, and Digital Payment Security Controls Assessments. He has assisted several end-to-end Information Security assessments including application security review for SaaS/PaaS applications to ensure that clients are compliant with various regulations such as PAPG, PPI, HIPAAA, NYDFS, ISNP, SG MAS, CSSF as well as aligned with ISO and NIST frameworks.
• Conducted Cyber Maturity Assessment for a Life Sciences company, assessing them and providing current and target maturity ratings on key cyber capabilities such as: Cloud Security, Network Security, Third-Party Supplier Management, Cyber Threat Intelligence, Patch and Vulnerability Management, Incident Management, Business Continuity & Disaster Recovery, etc.
• Created and developed Information Security Policies, Procedures, and associated documentation for a leading AI-based software company, based on latest ISO 27001:2022 standard. Collaborated closely with key stakeholders to assess organizational needs and requirements, ensuring alignment with ISO 27001 standards and best practices.
• Conducted risk assessment across multiple business functions for an AI-based software company in accordance with ISO 27001 & 27005 standards. Created and maintained the Risk Register; along with developing a Risk Treatment Plan to track and address the identified risks.
• Performed digital payment security controls (DPSC) assessments for over 50+ applications for a private sector bank to address cyber security risks prevalent in their overall digital payment landscape.
• Performed vendor risk assessments for third party service providers in order to assess the risks associated with utilization of their products and services. Performed UIDAI Assessment for a leading life insurance organization and SWIFT Assessment for a private sector bank.
ISO 27001:2022 Lead Auditor