Security Analyst Qa

DIVYA SINGH

Email: **********.**@*****.*** Mobile: +971********* Address: Dubai International Financial Centre, Dubai, UAE

EXPERIENCE:

**/****-: MANAGED SECURITY SERVICES COMPLIANCE AND QA ANALYST Company: HELP INFORMATION TECHNOLOGY CONSULTANCY LLC – - THE GALLERIES, DUBAI

Responsibilities:

• Handle the Risk Management & Compliance service, supporting the internal Risk & Compliance team and coordinating with managed security service team to ensure a comprehensive risk management program.

• Track, operate and manage the Risk Register and Risk Exception/Acceptance processes, ensuring timely tracking of each and reporting to leadership of status.

• Work with Vulnerability Management team to ensure visibility and tracking of risks relating to my company vendors.

• Review third party contracts, service agreements, proposals and SoW documents for security and privacy compliance.

• Develop security awareness programs and execute awareness campaigns for Tech and business functions.

• Maintain the security risk register and track risk mitigation activities, working with stakeholders and action owners.

• Plan and scope IT internal audit reviews, including meeting key stakeholders, drafting and agreeing audit Terms of Reference.

08/2019-07/2020: CYBER AND INFORMATION SECURITY ANALYST Company: CROWE MAK DIFC -LIBERTY HOUSE, DIFC, DUBAI, UAE Responsibilities:

• Perform analysis of cyber security and IT vulnerabilities, threats and incident trends to understand root causes and propose counter measures that mitigate risk and improve security and IT processes.

• Create security policies, procedures, and other artefacts to support and maintain the Information Security Management System (ISMS).

• Prepare and own compliance reporting and keep tracking and improving the compliance levels against internal security controls framework.

• Handle projects and service documentation relative to cyber security and analzing service security risks

• Monitor tools, procedures, and documents to process and report cyber activities through to resolutions

• Creating security alerts, use cases, correlation rules, dashboard, graphs and reports in Splunk based on customer requirement.

• Implement cybersecurity features based on best practices & conduct cyber security vulnerability assessments

01/2019-07/2019: INFORMATION TECHNOLOGY DEVELOPER

Company: ASTECO - ROLEX TOWER, DIFC, DUBAI, UAE 09/2016-07/2017: ASSOCIATE SOFTWARE ENGINEER

Company: VISION INFOSYSTEM PVT LTD

EDUCATION:

BIRLA INSTITUTE OF TECHNOLOGY & SCIENCE, PILANI-

DUBAI

08/2017-07/2019 - Master’s Degree in Software System Engineering - DIAC, DUBAI MAHARSHI DAYANAND UNIVERSITY- INDIA

09/2012-09/2016 - Bachelor’s Degree in Computer science Engineering- DELHI NCR, INDIA

PROFESSIONAL SKILLS:

• Strong Knowledge in Governance, Risk & Compliance (GRC) Frameworks,

• Handle: Factor Analysis & Information Risk (FAIR) Methodology

• Experience in thread Monitoring, communication, Data analysis, Research.

• Understanding of Compliance security standards and frameworks such as ISMS ISO27001, ISO27005,ISO9001. NIST, etc.

• Social engineering campaign: -E-mail Spear Phishing, Mobile Device Hacking, Wireless Attacks

• Middle-level experience in Data Visualization (Power BI, Tableau, Google docs studio) and strong knowledge of MS excel.

• Debugging experience: – C++/C#, Python,C JavaScript, HTML5/CSS, Node.JS, linux etc. CERTIFICATIONS/ THESIS

• SPLUNK - Splunk 7.x Fundamentals.

• Ethical Hacking: Social Engineering

• Zero Trust Networks

• CompTIA security+ (Acquiring more certifications as we speak)

• Penetration Testing: Advanced Tunneling and Exfiltration

• Thesis - Applications of Blockchain in the Aviation industry TRAINING PROGRAMS

• Member of the LongDom conferences committee.

• Global ISO Knowledge sharing Summit- 2021 For (Alvin Integrated Services)

• Live Webinar on Cybersecurity, Data Protection and AI in Information security ( Hamda Al Shamsi Lawyers & Legal Consultants),( IEEE BAU WIE), etc ASSETS

• Enterprising research and self learning skills

• Strong presentation and communication skills

• Trilingual in English, Hindi, and Punjabi

Contact this candidate