Raju Vishwanath Shirsath

Manager in Audit, Risk & Compliance

IKS Health

Navi Mumbai

10.2015 - Current

Coordinated and supported the ISO 27001:2022 ISMS audit conducted by a third-party auditor, ensuring proper documentation, evidence collection, and compliance with information security standards.
Led internal audit and evidence collection to support SOC 2 compliance and ISO 27001 ISMS audits.
Conduct internal audits for the assigned department to evaluate its QMS objectives, and review process documentation to gain insights into its workflow.
Worked closely with vendors and external auditors on audit and assessment tasks, ensuring the prompt resolution and completion of all action items.
Performed Vulnerability Assessment and Penetration Testing (VAPT), including network scanning with Nmap to identify open ports and services.
Conducted Nmap scans and submitted findings to SISA for internal penetration testing; coordinated with server and network teams by communicating vulnerabilities identified by SISA to facilitate a timely resolution.
Supported quarterly vulnerability assessments (ASV scans) in partnership with SISA, and led coordination with technical teams to address identified issues in alignment with PCI DSS requirements.
Conducted HIPAA compliance assessments to ensure adherence to the Privacy Rule, Security Rule, and Breach Notification Rule.
Facilitate multiple training sessions annually, covering topics such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), Fraud, Waste, and Abuse (FWA), Security Awareness, Annual Phishing Training, and Workplace Harassment. Ensure full participation from all users, and confirm the completion of assessment tests.
Performed periodic access reviews to validate user privileges, and prevent unauthorized system access.
Conducted periodic access audits across various platforms, identifying deficiencies, and providing detailed reports to stakeholders. Collaborated with them to address and resolve open items promptly.
Perform monthly compliance audits for office-based locations, reviewing policies and procedures across Admin, HR, and IT departments. Identified non-compliance, documented audit findings, reported them to the concerned teams and management, and collaborated with teams to implement corrective actions to resolve compliance issues.
Conduct on-site audits for vendors to verify that their compliance controls and security measures align with the company's compliance standards and policies.
Monitor home-based users' system installations and ensure proper wiping of systems when users change hard disks or leave the organization.
Manage the system inventory for both office-based and home users within the organization, as well as for vendor users.
Regularly audit the home-based office users and domestic vendor users to ensure their systems comply with security controls outlined in the company's compliance policies.
Hold monthly meetings with the tech team to discuss improvements based on audit findings from office locations and to review ongoing security enhancements within the organization.
Managed the provisioning and deactivation of IDs for client support staff to ensure secure access control.
Oversee the vendor exit process during their separation from the organization, ensuring that all systems and servers used for work are fully wiped in accordance with the company's compliance policy.
Conduct monthly reviews of system firewall logs to ensure security and compliance.
Develop PowerApps for various departments within the organization to streamline and optimize their daily workflows.
Implement a structured approach to guarantee timely and accurate reporting of all compliance tasks within the organization.
Aquity Solutions India Private LTD

System Administrator

Wipro InfoTech

Mumbai

06.2015 - 10.2015

System administration for Mumbai International Airport Limited (MIAL)
Coordinated client site operations.
Managing LANDesk server for patch management and software deployment.
Monitor the status of Windows updates deployed to user terminals via the Landesk server.
Identify and assess high-risk systems due to outdated Windows updates.

Technical Executive

IT Source Technologies LTD

Mumbai

03.2014 - 06.2015

Technical support at Wipro Ltd.
Provided onsite client support at Mumbai International Airport Limited.
Team lead for a remote team that resolves first-level issues through remote connections.
Conduct root cause analysis on critical incidents to improve systems reliability and user experience.

Desktop Support

Allied Digital Services Ltd.

Bombay House

05.2011 - 03.2014

Managed on-site IT operations at Tata Power.
Configured & troubleshot Microsoft Outlook.
Performing hardware and basic network troubleshooting, along with the installation and troubleshooting of corporate and telecom software.
Coordinated the setup of, Video Conference (VC), and Audio Conference calls using Polycom devices for seamless meetings and communications.

Summary

Overview

Work History

Manager in Audit, Risk & Compliance

System Administrator

Technical Executive

Desktop Support

Education

B.Com -

Higher Secondary -

Secondary -

Skills

Languages

Personal Information

Certification

Timeline

Manager in Audit, Risk & Compliance

System Administrator

Technical Executive

Desktop Support

B.Com -

Higher Secondary -

Secondary -

Similar Profiles

Brenna BrameBrenna Brame

MAUREEN KAMANGAMAUREEN KAMANGA

Mei BuschorMei Buschor

TANYA NAIRTANYA NAIR

SIDHESH RAMAKANT HIRLEKARSIDHESH RAMAKANT HIRLEKAR