Yash Shukla

• Performed risk analyses to identify appropriate security countermeasures
• Conducted various cybersecurity posture assessment against NIST and ISO 27001
• Conducted PCI DSS gap assessment
• Performed audits for various environments and businesses
• Risk Assessment based on NIST 800-53 (Cybersecurity Framework)
• Performed Cyber Security Maturity Audits and creating assessment reports
• Acted as Consultant on demand for various clients providing Cybersecurity advisory service and helping clients meet cybersecurity requirements
• Acted as Single Point of Contact (SPoC) to ensure smooth communication between the various internal team and clients, ensuring all commitments as per the SoW are achieved
• Review of client network infrastructure, policies, and procedures
• Managing Internal ISMS

• Conducting ISO 27001:2013 Application and Process Internal Audit and reporting Non-conformities and OFI’s as part of the report
• Delivering security awareness training and customer process training to the new joiners
• Delivering security talks to the Capgemini Cybersecurity business unit on various information security topics on ad-hoc basis
• Preparing monthly security dashboard for the various activities carried out as part the project and presenting it to the Customer
• Vulnerability Management:
 Preparing vulnerability assessment report as per the vulnerability for servers and applications
 Raising a Jira ticket for the vulnerability mitigation
• Managing Security Operations such as:
 monitoring daily and monthly IDS/IPS hits on the Customer applications from different Countries and reporting suspicious hits
 Monitoring and analysing Radware daily and monthly reports and reporting any malicious traffic received on the applications

• ISO 27001:2013 Implementation and Auditing for the clients:
 Performing Gap assessment
 Conducting Risk Assessments and documenting treatment plan
 Documenting Statement of Applicability
 Documenting various policies and procedures for ISMS
 Conduct Information security awareness training for the employees
 Helping in implementing security controls identified in risk treatment
 Conducting Internal audit
 Providing support during external audit
• Physical Security Assessment for the one of the BPO and Consulting firm in India
• Vulnerability Assessment:
 Carrying out monthly vulnerability assessment for the client using Nessus tool and providing a walkthrough to the client
 Supporting client in closing the vulnerabilities
• Managing Internal ISMS

• Vulnerability Assessment of Servers / Network device
 Conducting vulnerability assessment for the clients by using Nessus tool, Nmap and Qualys Guard
 Documenting vulnerability assessment report for the clients
 Provided report walkthrough and helped in mitigation of vulnerabilities
• Carried out application security testing for the client applications both manually and using tools such as Acunetix and Burpsuite