Konika Bhardwaj
Security consultant
Faridabad
Summary
Resourceful, quick thinking security consultant and leader with over 10 years of experience maintaining a secure environment while providing effective security presence and visible deterrent to crime. Results-oriented loss prevention officer and team builder to maintain a secure and compliant environment.
Overview
3
3
years of professional experience
3
3
Certifications
Work History
SECURITY, RISK & Compliance Focal
IBM India Pvt. Ltd.
- Part of the IT security SSO compliance team, my objective is to ensure that all identified security vulnerabilities pertaining to the customer’s IT infrastructure were resolved
- The detailed responsibilities were as below: Internal compliance audits based on ISO 27001 standards
- Handled Security Health Check for all servers and applications
- Worked on SIM, CIRATS Tool, ECM tool, GACDW Tool
- Maintain and work on issue and risk register
- Timely follow-up and working with delivery team for risk closure
- Preparing final report post audit which is published in client domain as well
- ITIL Audit
- Tracked open compliance issue with the help of SIM Tool
- Ensuring each open compliance issue is resolved within the target date agreed with the customer
- Risk letter for client based upon defects and threats
- Customer security document creation and implementation.
Quality Analyst lead
IBM India Pvt. Ltd.
- Preparation of defect metrics
- Conduct statistical analysis and ticket categories & identify improvement areas
- Working on defect prevention plan, Defect reduction and prevention plan
- Tool deployment (AIOPS, CDI, SNOW, Maximo, bluesight etc)
- Drive the Root Cause Analysis process and implementation with SA and SMEs
- Preparation of Weekly Metrics and status of defect prevention process
- Work with Team on Service Improvement & Continual Improvement
- Track SLA metrics
- Publish Account deck with all metrics and exceptions reports
- Avoid reoccurrence of unplanned interruption in IT services
- Working with the change team to improve the RCA quality and ensuring team is following the change checklist properly.
Senior operational professional
IBM India Pvt. Ltd.
- Tested various patches and hotfixes before production installs and documented operational behavior differences
- Tested instructions before production support implements them
- Tested and verified procedures and troubleshoot any problems that the helpdesks reported
- Evaluated and installed Quest for Exchange and Active Directory tools solved issues with the vendor
- Built systems for testing 3rd party vendor products
- Evaluated event logs by techniques such as alerting and visual.
Associate testing engineer
Videocon Mobiles
- Responsible for all levels of testing in the development process involved throughout the product development lifecycle, ensuring that the final software meets customer needs
- Involved in multiple development efforts for each release of the software for mobile handsets and tablets
- Responsible to test both hardware and software and track defects in bug sheet up to the closure
- Prepare software and hardware sanity report for each model
- Release customization sheet to the vendor with respect to device chipset and specifications
- Field testing to cover field scopes including Call, Messages, Roaming, Handover, PLMN, FM, GPS etc
- Verify and Submit project report covering all stages of development activity before the final MP approval
- For running changes in software, follow up and get the fix from ODM before the next order release.
Security Consultant
Accenture
10.2023 - Current
- Worked with UBER for 3 months and currently working with Airtel Payment Bank as a Compliance Manager( L3 resource).
- Part of the GRC delivery engagements and executing advisory & consulting projects around regulatory risk & compliances such as ITGC, PCI-DSS, ISO 27001, Data Privacy etc.
- Responsible for internal, external, application, vendor and regulatory audits.
- Responsible for control testing of security tools based on MBSS.
- Execute information security assessment, business continuity assessment, risk assessments pertaining to APBL IT/Information Security environment
- Lead the development and implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored.
- Execute technical risk assessments around applications, control testing on premise and for Cloud environment etc.
- Identify the KPI’s for different various Information security deliverables and document matrices for effectiveness measurement. Working on overall posture management.
- Understand Regulatory and Business requirement and drive the Information security compliance requirements in line to the same.
- Execute activities like data discovery, privacy & security impact analysis and propose process and technical solutions to the client
- Document policies & procedures meeting the regulatory compliance and risk management requirements
- Develop knowledge base, re-usable components for GRC advisory services
- Responsible for development and enhancements of GRC services, team and delivery capabilities.
- Facilitating Phishing and DR drill for the organization.
- Cyber awareness training planning and execution.
- Archer tool deployment for vendor management, security scorecard, compliance calendar and exception management.
Delivery Compliance Officer (Deputy Manager) – Business Assurance
HCLTECH
11.2021 - 10.2023
- Mentoring team for conducting ECA (enhanced compliance assessment) with ISO 27001 framework with guiding them for IDR and the process
- Monitoring testing of all contractual and baseline controls during the ECA cycle
- Framing contractual controls based on the contract signed with client
- Based on the contract implementation of contractual and baseline controls in new accounts
- Conducting weekly cadence calls for evidences follow-up
- Releasing compliance status report on fortnightly basis
- Releasing draft and final report post ECA completion
- Maintaining issue and risk register
- Timely follow ups on issues and risks for closure
- Artifacts/Evidence validation for the ECA cycle and timely updating it on the LEAP tool
- Artifacts/Evidence proper uploading on the tool
- Conducting risk advisory sessions for the delivery teams
- Collaborate with other R&C teams (VRM/Privacy/BCM) and support them in getting the assessment completed.
Education
Bachelor of Technology - Electronics And Communications Engineering
Manav Rachna International University
Faridabad, India 04.2001 -
Skills
Regulatory knowledge
Team Collaboration
Operational Risk
Compliance Monitoring
Internal Controls
Audit management
Auditing processes
Investigations skills
Document Review
Risk Management
Legal Compliance
Certification
ISO 27001:2013 LA
Timeline
Security Consultant
Accenture
10.2023 - Current
Delivery Compliance Officer (Deputy Manager) – Business Assurance
HCLTECH
11.2021 - 10.2023
Bachelor of Technology - Electronics And Communications Engineering
Manav Rachna International University
04.2001 -
SECURITY, RISK & Compliance Focal
IBM India Pvt. Ltd.
Quality Analyst lead
IBM India Pvt. Ltd.
Senior operational professional
IBM India Pvt. Ltd.
Associate testing engineer
Videocon Mobiles