Pavan Sharma

Experience

• 

  DTE Energy

  Oct 2001 - Apr 2003

  LAN Administrator
• 

  Citi

  Sept 2004 - May 2005

  Security Consultant
• 

  Citigroup

  Nov 2005 - Jul 2006

  Database Security Administrator
• 

  Target Corporation

  Oct 2006 - Sept 2007

  Security fulfillment Specialist
• 

  CV Raman Degree and Post graduate College

  Jan 2008 - Apr 2010

  LAN Administrator
• 

  NGA Human Resources - Australia & New Zealand

  Dec 2010 - Feb 2017

  • Systems Administrator (IBM System i)

    Jun 2014 - Feb 2017

  • Infrastructure Support Officer

    Dec 2010 - Jun 2014
• 

  Dayforce

  Feb 2017 - now

  My role involves defining and maintaining IT governance framework and security management program in accordance with company’s strategy this includes domains such as IT operational security, cyber security & risk management, incident management and security compliance practices, monitoring and measurement of controls. •Responsible for developing security policies and standards in alignment with organization’s risk profile. •Provide policy advice and guidance to the key stakeholders on security related issues.•Responsible for conducting IT security threat and risk assessment and ensuring effective risk management controls are implemented across the business.•Collaborating with various stakeholders in business units to ensure that all key risks are identified and managed.•Conduct compliance readiness assessments against standards and framework-based requirements.•Support management of audits, external assessments, and assurance processes such as internal and external audits for ISO27001& ISO9001 certification & SOC1, SOC2 report. •Spearheading the ISO27001 certification project. •Work with L&D team to review yearly security awareness training and regular companywide security awareness Communications. •Keep track of Privacy and other legal changes and make business units aware through security & privacy bulletins. •Governance of BCP and coordinate pen testing and vulnerability assessment and follow-up with business units to mitigate the risk identified in testing. •Manage, review and co-ordinate the audit findings and track the corrective and preventive action.•Help sales and marketing team and business unit answer Client's RFP and Due diligence questionnaire regarding Information security.•Contract reviews for Information Security topics and collaborating with the Legal department.•Build and develop relationships with business units to develop a security aware culture.•Compliance reporting to the management on security related aspects. Show less

  • Cybersecurity Governance Manager

    Feb 2022 - now

  • Information Security Manager

    Feb 2017 - Feb 2022