Experience

• 

  Infosys

  Jul 2011 - Jun 2014

  Juniper technical assistance engineer/senior system engineer

  Experienced Systems Engineer at Infosys Technologies Limited, based in Pune. Highlights of my role include:- Network Issue Resolution: Proficient in handling and resolving critical and high-priority network issues on Juniper IDP/IPS in production environments. Utilized remote desktop connection, phone, or email to troubleshoot effectively.- Configuration Expertise: Skilled in configuring and troubleshooting various network features including NAT, IDP/IPS, and UTM features such as Anti-virus, Anti-spam, URL filtering, and Screening.- Lab Testing: Conducted thorough testing by replicating customer network scenarios in lab environments to understand packet flow and address challenges and problems faced by customers.- 24/7 Support: Provided round-the-clock network support as a Support Engineer, ensuring adherence to SLAs while escalating tickets as needed.- Documentation and Analysis: Meticulously documented system configurations, mappings, and processes. Analyzed security logs to identify and mitigate network threats effectively. Show less

• 

  Dxc technology

  Jul 2014 - Aug 2017

  Information security engineer

  Experienced Information Security Engineer at DXC Technology, located in Noida. Key responsibilities included:- Level-2 Technical Assistance: Proficient in configuring, implementing, and troubleshooting network issues as a Level-2 Technical Assistance Engineer. Demonstrated ability to understand customer network environments and devise effective firewall change plans to ensure smooth connections.- Network Troubleshooting: Skilled in resolving network-related errors with Juniper SRX branch end devices and adept at troubleshooting network security issues on customer networks. Collaborates effectively with other engineers to address complex challenges and ensure optimal network performance. Show less

• 

  Ey

  Aug 2017 - Mar 2023

  Senior security consultant 3

  Experienced Senior Security Consultant at Ernst and Young Global Delivery Services (GDS), based in Gurgaon. Specializes in:Threat Modelling: Proficient in executing Application Risk Assessments and Application Controls Reviews, having conducted threat modelling and secure architecture reviews for over 100 applications. Possesses expertise in leading technologies such as SAP, Salesforce, AWS, and Azure while assessing applications.Data Privacy: Well-versed in providing recommendations for compliance with data protection laws, including GDPR, and company policies. Skilled in managing escalated queries across all business sectors and resolving them through effective solutions. Contributed to the development of GDPR gap assessment questionnaires and GDPR privacy metrics.Risk Management: Adheres to due processes when implementing policy changes and streamlining regular policy management operations. Identifies risk areas and conducts risk-based audits/assessments, taking necessary actions to mitigate identified risks and providing recommendations for process improvement. Renowned for assessing, controlling, and mitigating risk in alignment with policies and procedures, while efficiently establishing and monitoring risk management registers. Show less

• 

  Pwc india

  Mar 2023 - now

  Manager

  Dynamic cybersecurity leader with extensive experience in managing the CISO function for a prominent commodities trading company. Collaborates closely with CTO/CIO to develop comprehensive cybersecurity roadmaps and enhance risk management awareness across departments. Excels in reviewing and enhancing IT security policies, procedures, and controls to meet regulatory standards and business requirements. Adept at assessing existing security infrastructure and suggesting improvements to enhance cybersecurity posture, leveraging industry best practices like the NIST Cyber Security Framework.Expert in leading ITGC and other IT assessments, ensuring closure of findings and effectively managing risk registers. Skilled in analyzing top assets, threats, and risks through VAPT assessments and driving successful remediation efforts. Integrates security seamlessly into business strategy, processes, and culture through effective awareness campaigns and training initiatives. Acts as a liaison to auditors and examiners, providing guidance on CISO functions and supporting relevant activities.Additionally, proficient in project management, maximizing team performance by monitoring daily activities and mentoring team members. Demonstrated success in identifying and pursuing multiple proposals/RFPs, including submissions for government and non-government clients. Collaborates closely with stakeholders to define project scope, goals, deliverables, and resource requirements, ensuring successful project execution from inception to completion. Effectively manages budgets and allocates resources to optimize productivity and profitability. Show less