Information Security Professional

I am an Information Security & Compliance Expert with 15+ years of experience in ISO 27001, GRC, SOC, MSSP, BSI C5, and NIS 2. I have worked across E-Health, Banking, Finance, and IT Consulting, leading security programs and ensuring compliance.

• Computer Engineering

Ø Implemented & Maintained ISO 27001, BSI C5 & ISO 22301 (BCMS) –
Established security and business continuity frameworks, leading organizations
to achieve certification.
Ø Regulatory Compliance & Audit Management – Ensured continuous
compliance with MDR, ISO 27001, BSI C5, and ISO 22301, managing internal &
external audits.
Ø Risk Assessment & Vulnerability Management – Led security risk assessments,
penetration testing, and threat management strategies to minimize risks.
Ø Developed an Application Security Program – Established secure coding
practices, security guidelines, and automated security testing across teams
and Integrated secure SDLC & CI/CD pipelines,
Ø Security Monitoring & SOC Implementation – Built and operated 24x7 Security
Operations Centers (SOC) with SIEM & DLP for real-time threat detection.
Ø Incident Response & Crisis Management – Developed Business Continuity
Plans (BCP) and incident response strategies for rapid mitigation.
Ø Security Awareness Program –Developed Training Program for 500+
employees on security best practices, fostering a security-first culture.
Ø MSSP (Managed Security Services) Development – Designed & launched
Managed Security Services (MSSP) for enterprise clients.
Ø Security Consulting & Advisory – Provided expert consulting on secure code
reviews, penetration testing, and compliance frameworks.

Ø Governance, Risk & Compliance (GRC) – Implementing ISO 27001, MDR, BSI
C5, ISO 22301, and managing security audits & risk assessments.
Ø Security Program Development – Establishing security programs from scratch
and aligning security with business goals.
Ø Application Security & DevSecOps – Building secure SDLC frameworks,
integrating security into CI/CD, and performing code reviews & penetration
testing.
Ø Security Operations & SOC – Developing and managing Security Operations
Centers (SOC), SIEM, DLP, and incident response strategies.
Ø Cloud & Infrastructure Security – Ensuring secure configurations, identity &
access management (IAM), and cloud security best practices.
Ø Third-Party Risk Management – Conducting vendor security reviews,
compliance checks, and contract assessments.