An experienced Information Security Specialist with 20 years of experience:
Cyber Security Framework (SANS, NIST, CIS, ISO, GDPR, SWIFT CSP & CSCF) Implementer, PCI DSS QSA, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, Certified Data Privacy Solutions Engineer (CDPSE), IT Audit compliance consultant
- Worked with the financial institutions, retailers, Oil & Gas companies and hotels on their PCI DSS, PA DSS, and ISO 27001 assessments - Delivered GRC services including application and data security assessment/audits, to the clients.
- Assessed various technologies, such as IDS/IPS, Encryption, Tokenization, Log Monitoring, cloud infrastructure, vulnerability management system, Firewall & Router configuration.
- Performed GDPR Data Protection Impact Assessments (DPIA) for clients.
- Advised various clients on preparing the security policies and procedures in line with the PCI DSS and ISO 27001 standards.