Dilshad Fozailun Nabi
Bengaluru
Summary
Assistant Manager with significant experience at Deloitte India, focusing on risk management and compliance. Demonstrated ability in creating effective information security policies and improving operational efficiency. Expertise in data analysis and team training, contributing to successful risk management strategies and organizational growth.
Overview
7
7
years of professional experience
1
1
Certification
Work History
Assistant Manager
Deloitte India
Bengaluru
06.2025 - Current
- Supported enterprise ISMS implementation and ongoing risk management initiatives.
- Performed information risk assessments, data classification, and control mapping aligned with ISO 27001. ISO 42001, ISO 9001, SOCC 2 Type 2
- Developed, reviewed, and updated information security policies, standards, and procedures.
- Conducted document reviews for audit readiness and regulatory compliance.
- Assisted clients with remediation planning and continuous improvement activities.
- Assessed risk factors for client projects across various industries.
- Developed risk management frameworks and strategies for clients' needs.
- Analyzed data to identify potential vulnerabilities in client operations.
- Prepared detailed reports outlining risk assessments for stakeholders.
- Supported clients in implementing effective risk management practices and tools.
- Recommended revision of risk management documents, procedures, and forms to comply with regulations.
- Reviewed contractual documents to determine correct insurance coverage.
- Developed training materials for employees on identifying and addressing risks within their roles.
- Researched new technologies and processes related to risk management initiatives.
- Identified opportunities for cost savings through improved risk management processes.
- Developed and documented risk management systems.
- Developed project plans, ensuring alignment with business objectives and timelines.
Assistant Manager, ISO & Audit
DocOnline
10.2023 - 06.2025
- Led ISMS implementation, maintenance, and surveillance audits for ISO 27001, ISO 27701, ISO 9001, SOC 2 Tyep 2
- Developed efficient workflows to enhance service delivery and patient satisfaction.
- Implemented policies to ensure compliance with healthcare regulations and standards.
- Assisted in resolving patient inquiries and complaints effectively and promptly.
- Implemented quality control measures to uphold company standards.
- Conducted internal, external, and third-party risk assessments.
- Managed security awareness programs, incident response reviews, and corrective action plans.
Information Security Consultant
GRC Secure
Bengaluru
01.2021 - 10.2023
- Delivered ISO 27001, ISO 27701, and GRC consulting services to multiple clients.
- Performed IT risk assessments and compliance gap analysis.
- Assessed security risks and vulnerabilities in client systems.
- Developed security policies and procedures for various organizations.
- Conducted security audits to ensure compliance with industry standards.
- Reviewed and updated incident response plans regularly.
- Evaluated new technologies for their ability to meet organizational security requirements while providing adequate protection against external threats.
- Mentored junior employees in departmental activities and procedures.
QMS Consultant
Quality Austria Central Asia
09.2018 - 01.2020
- Implemented and audited ISO 9001:2015 quality management systems.
- Developed quality management system documentation for various industries.
- Conducted internal audits to ensure compliance with international standards.
- Facilitated training sessions on quality assurance practices and methodologies.
- Assisted clients in identifying areas for process improvement and risk management.
- Reviewed and analyzed client data to enhance operational efficiency.
- Provided expert advice on regulatory requirements and industry best practices.
- Supported continuous improvement initiatives across client organizations and projects.
- Facilitated discussions between departmental teams regarding best practices within their respective areas.
- Mitigated risks by leading and auditing international subsidiaries and operational processes.
- Developed and implemented QMS policies, procedures and work instructions to meet customer requirements.
Education
B.Tech -
Al Falah University
Haryana05-2018
Skills
- Risk management and assessment
- Compliance and regulatory management
- Audit processes and compliance
- Vendor risk management
- Quality assurance and management
- Microsoft Excel
- Information security strategies
- Incident response planning
- Policy development and enforcement
- Data analysis techniques
- Training and staff development
- Coaching and mentoring skills
- Business development strategies
- Multitasking and organizational skills
Certification
• ISO/IEC 27001:2022, ISMS, Lead Auditor, Intertek
• ISO/IEC 27701:2019, PIMS, Lead Auditor, TUV
• ISO/IEC 42001:2023 AIMS, Lead Auditor
• SOC 2 Type II, NSE Network Security (NSE 1 & 2)
• ISO/IEC 27701:2019, PIMS, Lead Auditor, TUV
• ISO/IEC 42001:2023 AIMS, Lead Auditor
• SOC 2 Type II, NSE Network Security (NSE 1 & 2)
Languages
English
Advanced (C1)
C1
Hindi
Native
Native
Timeline
Assistant Manager
Deloitte India
06.2025 - Current
Assistant Manager, ISO & Audit
DocOnline
10.2023 - 06.2025
Information Security Consultant
GRC Secure
01.2021 - 10.2023
QMS Consultant
Quality Austria Central Asia
09.2018 - 01.2020
B.Tech -
Al Falah University