Management Information Security

PROFESSIONALSYNOPSIS

Qualified CISA exam in December 2015 & Certified as Lead Auditor for ISMS 27001: 2013.

* *****’ of learning experience(MBA) in Information Security which included studying Acts like Sarbanes-Oxley, HIPAA, PCI-DSS etc., process improvement, BCP & DR processes, frameworks like COBIT, COSO and risk assessment methods like NIST.

Gained niche experience in IT Systems concurrent audit for banks, typically involving compliance of incidence management, change management, backup Management, performance management, log monitoring etc.

Worked with a team of consultants working for stock broker clients. Periodic regulatory audits for members of Indian exchanges (NSE, MCX, NSE & BSE).

Worked with a team of consultants working for vendor audits. Audited vendors of Axis Bank for Information Systems in ANB Global Consulting.

Worked with a team of consultants working on Management Guided Audit. Audited the working at India branch based on the instructions by senior management.

Worked on ICFR audit on IT system controls.

Worked on implementing the recent cyber security framework developed by RBI for a Bank in India.

EDUCATION

Examination

Specialization

College/University

Year of Passing

Percentage

MBA-IT Business Management

Dual Specialization in Information Security and IT Systems

Symbiosis Centre for Information Technology (SCIT), Pune/

Symbiosis International University

2014

2.74/4.0 (CGPA)

Bachelor of Engineering

Information Technology

Oriental Institute of Science & Technology, Bhopal/RGPV

2009

72.84%

Class XII

(PCM, IP, English)

Kendriya Vidyalaya Indore No. 1/ CBSE

2005

73.80%

Class X

Science + Mathematics

Kendriya Vidyalaya Mhow (M.P.)

2003

75.60%

WORK EXPERIENCE

Present:

ANB Global Consulting Co. Pvt. Ltd, Information Security Consultant Apr’16– Present

(ANB Global Consulting Co. Pvt. Ltd. is an Independent Auditing and Consulting firm in the area of IS Audit, Information Security, IT Assurance & compliance, IT Governance)

Project: Cyber Security Framework implementation (Mumbai)

Working with team for client ADCB-Abu Dhabi Commercial Bank(Based on recent RBI(Reserve Bank of India, India’s Bank regulatory body) circular on implementation of Cyber Security Framework)

RBI through its circular RBI/2015-16/418 DBS.CO/CSITE/BC.11/33.01.001/2015-16 dated 2nd June 2016 mandated all banks to implement cyber security framework. Our team is helping the bank to implement the same.

Project: Broker Audits (Mumbai)

Working with team for broker audits(Based on NSE, MCX & BSE circulars)-

Audited few share brokers providing services in SOR, ALGO, DMA and other areas as per the circulars issued by the exchanges.

Interacted with senior management and IT Team of these firms and audited them to check their compliance with norms as per circulars issued by the exchanges.

Project: Vendor Audits (Mumbai)

Working with team for vendor audits (Vendors of Axis Bank).

To interact with senior management and all the respective teams of vendors to understand working culture and amalgamation of IT Systems in the organization and mapping it with IT General Control checklist provided by Axis Bank.

Project: Management Guided Audit (Mumbai)

Working with team for Management Audit of CIMB Securities (India) Pvt. Ltd.

Based on the

(1) Scope of audit provided by the senior management,

(2) Policies of the organization and

(3) IT-GC

We created the check list of audit and audited the India branch of CIMB.

Project: ICFR audit for IT Controls (Mumbai)

Working with team for ICFR audit of CRIF High Mark

Understanding IT controls of the applications and verifying if any vulnerabilities present in those controls that can affect the generation of financial reporting.

Previous:

AAA Technologies, Information Security Consultant May’15– Apr’16

(AAA Technologies is an Independent Auditing and Consulting firm in the area of IS Audit, Information Security, IT Assurance & compliance, IT Governance)

Handling client SBI for concurrent audit project; leading discussions with SBI (asst. and deputy general managers) from various departments and finalizing audit scope and then auditing as per IT/IS policies.

Handling a team of 3 team mates assisting and guiding them for the concurrent audit based on compliance of incidence management, change management, backup Management, log monitoring etc.

Involved in AAA Technologies internal meetings & client meetings for other projects for application/process audit.

Helped in the development cycle of IT Software for concurrent audit (WebCAS- i.e. Web based concurrent audit system).

Online marketing of trousers and shirts (Brand: Bukkl), Freelancing Apr’ 14– Apr’15

(Bukkl Enterprises, launched in 2010.BUKKL offers clothing for the new age image conscious youth.)

Marketed trousers and shirts; and helped the employer to bring them on online portal like Paytm, Shopclues, and SnapDeal etc.

Tech Mahindra, Market Researcher, Summer Intern Apr’ 13 – Jun’ 13

Worked directly under Global Delivery Head of Mahindra Satyam (now Vice President, Tech Mahindra)

Primary and secondary research to identify and compare the delivery and quality practices in IT Industry

Infosys Limited, Systems Engineer Feb’ 10 – Aug’ 11

Project: Fidelity Investments (Hyderabad)

• Development of Accounts & Contact module (applets) for the client.

• Basic training/assessment by Fidelity on data protection, security and compliances given by Fidelity.

• Experienced 1st and 2nd party audit at Infosys as a team member of the Infosys’ Fidelity Project

Project: Wachovia-Wells Fargo (Hyderabad)

• Development of applets for Accounts module along with the team on Siebel CRM.

• Worked as a senior developer/team liaison thus communicating with manager, onsite BA other team mates and bridging the gap

Infosys Systems Engineer Training (Mysore)

• Industrial training for various languages/ concepts like OOPS, cost & estimations, etc.

• Training on soft skills.

• Advanced training for .Net module.

Certificates

CISA: ISACA: Certified Information Systems Auditor

Qualified ISACA: CISA exam in Dec 2015.

(Member id: 940784 & Exam id: 15940784)

May 2017, will complete the required 5 years of experience.

ISMS (ISO 27001: 2013) Lead Auditor: IRCA Certified ISO/IEC 27001:2013 LA

IRCA Certified Lead Auditor for Information Security Management Systems (ISMS) ISO/IEC 27001:2013. Training done at BSI Training Academy, Pune.

Personal Information

Date of Birth: March 02, 1987

Address: 33/A Mishra Nagar, Annapurna Road Indore (MP) 452009, India

T: +91-959******* • H: +91-977*******

E-Mail:*******.*********@*****.***

Contact this candidate