Experienced IT security professional adept with designing and implementing security solutions in high-availability environments. Deep knowledge of compliance regulations (ISO 27001, SOC 1/2, PCI-DSS, HIPAA, HITRUST). Strong understanding of cybersecurity, regulatory compliance, and Business Continuity. Proficient in industry GRC tools.
Overview
1
1
Certification
Work history
Senior Risk and Compliance Analyst
Mphasis Limited
Bengaluru, India
Manage relationships within Information Technology and Business Continuity/ Disaster Recovery areas of the organization
Enforce and maintain a common controls framework that aligns with applicable security policies, standards and regulations (e.gIS0 27001, SOC2)
Perform ongoing monitoring of risks and controls and partner with our business units to self-identify issues for the purpose of tracking and the development of remediation plans.
Conduct third party risk assessments in alignment with company security policies and industry standards
Conducts assessments of business unit exposures and new business initiatives, identifying risks, evaluating their potential impact and reviewingthe strengths and weaknesses of the firm's existing controls
Analyze Internal and External Audit reports and recommend enhancements to the risk assessment process
Prepare, conduct, and document quarterly Risk Control Assessments for business processes
Perform periodic gap assessments to validate IT compliance on an ongoing basis
Support vendor due-dligence process and help to define and execute overall third-party risk management efforts
Monitor and assess third party performance to ensure compliance with the TPRM program regulatory requirements, and service level agreements.
IT Auditor & Customer support team leader
AMWAY, Best of Nature, Best of Science
Bengaluru, India
Developed Floor Plan Audit training manual for new hires
Developed procedures and trained contract employees on Floor Plan field audits
Responsible to keep the company data confidential and to follow all the policies mandated by the organization
Leverage automated compliance tools to montor and report on compliance against control activities
Assist in risk assessments to identify security risks across business functions,products, and systems.
Participate in meetings with Internal Audit management and internal initiatives to improve internal audit processes and procedures
Review documented policies and procedures and challenge whether they remain current and are aligned to existing frameworks, policies, andstandards supporting functional processes
Served as a Team Leader and maintained the status of issues in the call-tracking system, emails, reports and performed appropriate follow-up onescalated issues and assisted to resolve the escalated issues
Documented complex issue resolutions for both the customerand internal reference, followed the appropriate support process and provided the customers satisfactory resolution
Education
Bachelor's Of Business Administration (BBA) -
Srn Adarsh college (Jain University)
07/2018 - 08/2021
Senior Secondary (12th) -
Srn Adarsh college
03/2017 - 02/2018
Secondary School (SSLC) -
Holy Angel's High school
05/2016 - 04/2017
Skills
Risk and Compliance
Risk Assessment
ISO 27001
SOC 1, SOC 2 Review and Penetration testing
Risk management expertise
Remediation
Risk Mitigation
SIG, Due deligance
TPSA, Issue Management
MS Excel, Proficient with Microsoft office programs
Stock Management
Internal Audit
Vendor Risk Management Process
Excellent interpersonal
Strong Organizational
Highly analytical
Detail and solution-oriented
Certification
ISO 27001
Information security management system
The Code of Business Conduct
Data Privacy GDPR and CCPA
MS EXCEL
DIGITAL MARKETING
PERSONALITY DEVELOPMENT
Tools and Technologies
Jira,Confluence
Ariba
Fusion,Fusion Rm and Fusion Qc
Hiprose, GRC, RCSA Mannual
Viso SharePoint, Cyber GRX
MS Excel.
Projects
SAY NO TO TOBACO
Spreading awareness of health through rally.
Personally visited places with the team and took the survey on products which are sold to youth.