Information Risk, Security Management, Project Manager and Auditor

4/2018 – 5/2020

Information Risk Security Manager
1. Perform Audit and Risk Assessment Services
a. Conduct Annual IT Audit.
b. Conduct Cybersecurity Risk Review.
c. Create Audit Plan.
d. Follow-up control issue and risk items.

2. Assist to obtain the following certification for the employer’s company:
a. ISO27001
b. ISO27701
c. PCI DSS 3.4.1
d. EU-US Privacy Shield
e. SOC 2 Types 1 and 2

3. Implement Information Security Framework
a. Implement Information Security Management System (ISMS) for ISO27001 Certification.
b. Institute Information Security Policies.
c. Define Technical Security Operation Requirements.
d. Define Operating Procedure for SIEM, Network Changes, Access Provision, Anti-virus and Endpoint Detection Response and Technical Compliance Review.
e. Provide consultancy to build Security Architecture, Controlled Procedures

4. Develop and Manage Business Continuity
a. Develop Business Continuity Plan.
b. Institute complete Business Continuity Planning Methodology.

CISA (Certified Information Systems Auditor), DIN ISO/IEC 27001, DIN ISO/IEC 27002, Certified Information Systems Security Professional (CISSP)