

Senior Technology & Cyber Risk professional with 17+ years of IT experience and 10+ years in Information Security, Technology Risk, Internal Audit, Control Assurance, and Governance, Risk & Compliance (GRC). Proven experience operating in second line-of-defence and partnering with first line-of-defense teams to provide independent challenges, oversight, and guidance across ICS and Technology Risk domains. Strong background in regulatory engagement, RCSA, risk appetite reporting, SOX, ITGC, NIST, ISO 27001, SOC1/SOC2, vulnerability management, IAM, and third-party risk. Experienced in financial services, pharmaceuticals, and regulated enterprise environments with strong stakeholder management and executive communication skills.
Talented Manager with expert team leadership, planning, and organizational skills built during successful career. Smoothly equip employees to independently handle daily functions and meet customer needs. Diligent trainer and mentor with exceptional management abilities and results-driven approach.
Operational Risk Management
Technology Risk Management
Cybersecurity Risk (ICS)
Second Line of Defence (2LoD)
First Line of Defence (1LoD) Oversight
Governance, Risk & Compliance (GRC)
Enterprise Risk Management Framework (ERMF)
Risk & Control Self-Assessment (RCSA)
Risk Appetite & KRI/KPI Reporting
Regulatory Engagement & Regulatory Change Management
ITGC, SOX, SOC1, SOC2
Team leadership
Operations management
Performance management
Workforce management
Staff development
Strategic planning
Decision-making
Employee onboarding
Vendor management
Policy implementation
Orchestrated ISO 27001 recertification and surveillance audits, ITGC SOX internal audits, Designed and implemented the third party security management program a consulting company from the scratch, Conducted multiple risk assessment program including PEN testing and Phishing simulation campaigns and helped organization to close/reduce/mitigate the security gaps/risks.