AVINASH NAROTE

Experienced and results-driven Information Security Professional, specializing in compliance, risk management, and safeguarding organizational assets. Skilled in performing gap assessments for newly integrated accounts, ensuring seamless alignment with ISMS standards. Demonstrates expertise in developing and enhancing security programs, as well as designing and implementing measures to achieve PCI DSS compliance. Proficient in conducting security assessments, managing external audits (ISO 27001, SOC 2, SOC 1, PCI DSS, NIST), and leading incident response protocols to mitigate risks effectively. Adept in delivering security training and awareness programs, driving business continuity management, Demonstrates excellence in team leadership, mentoring, and fostering collaboration to achieve organizational goals. Strong background in handling cross-functional teams, delegating tasks, and promoting a positive and productive work environment. Committed to maintaining high standards of information security while driving operational excellence and organizational resilience.

• Completed Graduation in BSC (MPC) In 2005.
• Lead Auditor ISO 27001 Certification from Intertek.
• PCI DSS Ver 3.2.1 CPISI (Certified Payment Card Industry Security Implementor).
• Privacy Information Management System ISO 27701:2019 from Intertek.
• Implementation for Risk Management Guidelines as per ISO 31000: 2018.
• Certified in Cyber Security (CC) from ISC2.
• Secured certification in ITIL-V3 in 2018.

• Demonstrating the ability to inspire and guide teams toward achieving goals
• Managed conflict resolution processes, reducing team disputes and promoting a
  positive work culture
• Creating collaborative and cohesive environments that foster productivity
• Implemented performance management strategies, resulting growth in team
  productivity
• Streamlined communication channels between internal teams and external vendors
  for efficient project/Audit coordination
• Established and maintained strong partnerships with vendors to ensure seamless
  delivery of services during PCIDSS and ISO 27001 audits
• Acted as a bridge between vendors and stakeholders, ensuring clear understanding of project/Audit requirements

• Father's Name: N. Dhondiba Rao
• Date of Birth: 08/23/78
• Marital Status: Married

To associate with an organization which progresses dynamically and gives me an opportunity to enhance my skills and be part of the team and lead that excels in work towards growth of the Organization while contributing my best and gives me satisfaction.

• Lead Auditor ISO 27001 Certification from Intertek.
• PCIDSS CPISI (Certified Payment Card Industry Security Implementor).
• Privacy Information Management System ISO 27701:2019 from Intertek.
• Implementation for Risk Management Guidelines as per ISO 31000: 2018.
• Certified in Cyber Security (CC) from ISC2.
• Secured certification in ITIL-V3 in 2018.

• Demonstrating the ability to inspire and guide teams toward achieving goals
• Managed conflict resolution processes, reducing team disputes and promoting a
  positive work culture
• Creating collaborative and cohesive environments that foster productivity
• Implemented performance management strategies, resulting growth in team
  productivity
• Streamlined communication channels between internal teams and external vendors
  for efficient project/Audit coordination
• Established and maintained strong partnerships with vendors to ensure seamless
  delivery of services during PCIDSS and ISO 27001 audits
• Acted as a bridge between vendors and stakeholders, ensuring clear understanding of
  project/Audit requirements

• · Develop and implement information security policies, procedures, and standards
• · Conduct regular security audits and risk assessments to identify vulnerabilities and weaknesses
• · Collaborate with IT and other departments to ensure security controls are in place and operating effectively
• · Provide security awareness training and phishing simulations for employees
• · Manage and respond to security incidents and breaches, including notification and reporting
• Develop and maintain compliance reports and dashboards for management and stakeholders
• Tracking security metrics and benchmarks to measure program effectiveness
• Lead and manage a team of security professionals to achieve program goals and objectives.
• Assisted in the creation of BCP document in accordance with team keeping in the view the RTO, RPO, BIA, Damage Assessor etc.

Audits:

• Coordinated ISMS / PCI DSS / SOC 1,2 /Client audits with external auditors and internal stakeholders.
• Gathered and prepared audit evidence and documentation
• Communicated with auditors, management, and stakeholders to ensure successful audit outcomes
• Tracked and reported on remediation efforts for audit findings and recommendations
• Reviewed and analyzed audit reports to identify areas for improvement
• Ensured compliance with industry standards and regulations
• Implemented process improvements to enhance audit efficiency and effectiveness.

• Father's Name: N. Dhondiba Rao
• Date of Birth: 08/23/78
• Marital Status: Married