Professional Summary

Results-oriented Information Security Manager (CISM), Certified Risk and Information Systems Control (CRISC), Project Management (PMP), IT Service Manager (ITSM) professional with over 13 years of comprehensive IT experience. A decade-long track record of successfully leading high-performing IT Infrastructure and Cybersecurity teams specializing in Data center Operations, Security Operations, Privacy controls and Cybersecurity Projects Management. Proven expertise in implementing best practices for Third Party Risk Management (TPRM) and conducting Threat and Risk Assessments, Privacy impact assessments (TRA/PIA) and success in designing & executing Information Security Controls within the NIST CSF v1.1/MITRE ATT&CK, CIS Controls v8 (formerly SANS) framework, as well as in Governance Risk and Control (GRC) COBIT 5/ 2019 frameworks. Well-versed in reviewing Security Architecture- Infra & cloud, vulnerability management, steering effective mitigation strategies and decision-making processes. Demonstrated ability in strategic leadership, forging robust relationships with stakeholders, and instilling a culture of security excellence. Extensive experience in ensuring Enterprise Information Security Audit Compliance, regulatory security, and adherence to ISO 270001/IEC 27701, PCI DSS, SOX (Type I and II), and HIPAA requirements. Recognized for implementing best practices in Security Controls, Security tools, and Monitoring systems. Delivers comprehensive training, conducting thorough investigations, and driving Process Automation initiatives.

Certifications
Certified in Cybersecurity (CC) ISC2 | Project Management Professional (PMP) | PRINCE2 Foundation | ITIL V3 2011 in ITSM

TRAININGS
Cisco Certified Support Technician (CCST) Cybersecurity | Certified Information Security Manager (CISM) | Certified Information Systems Security Professional (CISSP) | Certified Risk and Information Systems Control (CRISC) | Certified Governance Risk & Compliance (CGRC)

TECHNICAL & OPERATIONAL PROFICIENCIES

Security Frameworks: COBIT, NIST CSF v1.1, MITTRE ATT&CK, GDPR, ISO IEC 27001/ISO 27002, SAE, PCI DSS, HIPPA

Project tools/framework: Agile, Scrum, Waterfall, MS Project, JIRA, CLARITY

Incident Management: ServiceNow, Salesforce, HPSM, Tivoli, BMC Remedy

Security technologies: Penetration Testing, Vulnerability Scanning, Web Application Firewalls, Secure Code scan, CASB, DLP, Email Gateway, SIEM, AV/EDR/XDR, Certificate Management

Security tools: QualysGuard, Splunk Enterprise Security, Microsoft Defender, Kali Linux, ArcSight, Wireshark, Intruder, SolarWinds Security Event Manager, Netsparker, Malwarebytes

Cloud: Office 365, Amazon Web services (AWS), Microsoft Azure

Technologies: Cloud, Network, Storage, Virtualization, Database, Servers, Antivirus, Firewall, Systems Management

Professional Experience

Senior Security Infrastructure Project Manager

Confidential (06/2023 ??? Till Date), Toronto, ON, Onsite

Built and Lead internal Risk Management and Security/ Cybersecurity Operations - Onshore and Offshore (outsourced) teams - Incident Response/ severity outages, threat hunting and investigations and work closely with business unit owners to identify, triage and escalate critical incidents. Ensure security compliance standards/ regulatory requirements, manage and conduct IT Risks TRA/PIA assessments / vulnerability assessments and information security governance best practices in the areas of Security Risks, Incident Response, and mitigation.

?? Develop strategy and roadmap to provide guidance based on best practices for enterprise information security risk management, supporting governance, risk, and compliance functions, including 3rd Party Risk, TRA/PIA assessments during project intake, budget compliance.

?? Collaborate with CISO, internal Risk, Legal, Compliance and Audit teams on strategy to strengthen defenses with real-time monitoring, vulnerability assessments, Identity and Access management (IAM), Anti-Malware, Security Orchestration Automation and Response (SOAR), Security Certificate management.

?? Manage steering and governance committees to ensure that the right stakeholders are informed and involved in the cybersecurity posture and activities around Cloud/Application/Network Security.

?? Managed and delivered multiple Security medium-scale and large-scale projects around $1M to $15M short term and long term projects ??? between 6 to 18 months duration with high risk and high complexity.

?? Partner with internal stakeholders and established a process on mitigation plan to remediate Key Risk Indicators (KRI) based on the Risk Heat Map.

?? Implement security framework to assess and manage technological risks as per NIST CSF v1.1/MITTRE ATT&CK framework ??? Identify, Protect, Detect, Respond, Recover.

?? Ensure the development and updating of key documentation (e.g., standards, guidelines, etc.) to support Infosec processes and address fund-wide risks and Critical Security Controls

?? Manage teams to implement DLP to comply with General Data Protection Regulation (GDPR) to keep personal data, personally identifiable information (PII) and PHI Data.

?? Plan education and Security Awareness Training program to maintain a comprehensive understanding of Risk and threat landscape, phishing simulations.

?? Conduct monthly security Architecture reviews with BU owners to govern and mature security capability to protect Bank Infra and Cloud assets. Established SecOps teams and IT risk governance committees to ensure compliance with various regulatory technology requirements ISO 27001, ISMS IEC 27701, PCI-DSS, SOX.

IT Security Project Manager, Governance, Risk & Compliance
Citi Bank (02/2022 ??? 06/2023), Tampa, FL, Remote

Led the implementation of technical, administrative, and detective solutions to enhance the security of Citi Bank Infrastructure and Cloud.

?? Managed education and awareness to maintain a comprehensive understanding of Citi Bank???s threat landscape and cyber security trends to ensure the focus on the application/infra/database security.

?? Managed SecOps team to implement CyberArk Identity Access Management, Data Loss Protection- Endpoint Protection Platform (EPP) with all internal stakeholders, application teams to build, configure, implement, and track security issues and mitigate issue resolution IT problem tracking, identified failure root causes, recommended strengthened controls over software testing and change management to stabilize new systems.

?? Manage integration of SIEM and CASB for Cloud hosted application visibility, compliance, data security and threat protection.

?? Collaborated with SecEng team for Automation/ self-healing opportunities on medium and minor security incidences.

?? Partnered with the product leadership to drive security and compliance throughout the organization experience, identify opportunities, Operational Efficiency, reduce risks and increase security.

?? Oversaw governance of Endpoint detection and response (EDR) Process, Anti-Malware, Threat Intel, IDS/IPS.

?? Managed project teams to implement DLP to comply with General Data Protection Regulation (GDPR) to keep personal data and personally identifiable information (PII).

?? Worked with CISO, internal risk and audit team on strategy to strengthen defenses with real-time monitoring, vulnerability assessments, user behavior analytics, security orchestration, automation, and response (SOAR).

?? Established SecOps teams and IT risk governance committees to ensure compliance with various regulatory technology requirements ISO 27001, ISMS IEC 27701, PCI-DSS, SOX.

Infrastructure Project Manager
Guy Carpenter-Marsh & McLennan (07/2021 ??? 01/2022), New Jersey, NJ, Remote

Led infrastructure capacity refresh efforts in a designated data center, reducing costs by transitioning from physical servers to virtual servers.

?? Optimized infrastructure capacity in a defined data center and reduced costs by migrating physical servers to virtual servers, resulting in significant cost savings.

?? Collaborated with Environment Team, Application Team, and Finance Team to ensure project delivery within budget, and implemented cost-saving measures by implementing new environment.

?? Successfully delivered multiple projects involving building and establishing infrastructure servers, network, IT security, storage, virtualization, cloud, applications, and databases.

?? Identified gaps and opportunities in cost-saving on existing infrastructure by defining ways to analyze infrastructure and implemented cost-saving measures.

?? Effectively managed all activities related to Windows Migration, Cloud Migration, Data Center Migration, VDI Migration to Citrix, Server Migration, Database Migration, Exchange Migration, SharePoint Migration, Primary to DR, Infrastructure Refresh, Disaster Recovery, and Business Continuity Plan for multiple sites.

?? Provided financial analysis, planning, and budget control, while demonstrating proficiency in incident management, problem management, change management, release management, capacity management, resource management, contract management, license management, conflict management, and people management.

?? Collaborated with COEs, customers, senior management, business stakeholders, and project leaders to capture requirements, plan deliverables, effectively communicate project execution status, escalate risks, suggest alternatives, and ensure a healthy and productive environment and close collaboration is maintained throughout.

Manager Information Security

Royal Bank of Canada (10/2019 ??? 07/2021), Toronto, ON, Onsite and New York, NY - Remote

Led internal Cybersecurity SecOps teams to drive end-to-end delivery of Security projects and ensure compliance of Enterprise Content Management (ECM), eReporting, Web Content Management (WCM) and Bank Portal solutions using leading vendor products.

?? Led a team of security analysts to ensure the seamless execution of daily operations within the Security Operations Centre (SOC).

?? Worked with MSPs to maintain runbooks, escalation procedures and threat intelligence.

?? Reported on performance against service targets contained in Service Level Agreements.

?? Provided IAM services for adaptive and contextual authentication, SSO, MFA, access policy management and enforcement, session management, logging and reporting, and integration with applications.

?? Identified and helped implement continuous process enhancements/improvements to the different Cybersecurity services including conduct risk assessment, cost/benefit analysis, vulnerability assessments across infrastructure components Network (Firewall and Wireless), Load balancer, Servers (Active Directory, Web Application and Database) and any other relevant areas and providing guidance on encryption best practices to protect customer data.

?? Led and contributed to the completion of risk and control design assessments for an assigned business application, business portfolio, and overall enterprise, as well as risk mitigation and remediation plans and remediation strategy with performance reporting, scheduling staff resources and weekly reporting to Internal Audit Manager and CISO.

?? Partnered with the product leadership to drive security and compliance in accordance with ISO27001 and IEC27701 readiness, PCI-DSS, SOX certification throughout the organization, identify opportunities, Operational Efficiency, reduce risks and increase security.

?? Managed teams to build, test the platform security implementation, post-implementation review, issue resolution and manage change when necessary to meet project security requirements.

?? Supported and monitored ongoing compliance activities relative to applicable regulations and standards in accordance with ISO27001, NIST CSF v1.1, CIS Controls v8 (formerly SANS) Framework, PCI-DSS, SOC2 certification throughout the organization, identify opportunities, Operational Efficiency, reduce risks and increase security.

Project Manager ??? Cloud and Infrastructure Services
JPMorgan Chase (01/2018 ??? 03/2019); Quess Corp (06/2017??? 01/2018) Hyderabad, IND ??? Onsite and Columbus, OH - Remote

?? Responsible for refresh of Infrastructure capacity in a defined Datacenter and ensured Storage (SAN/NAS) Data Migrations, Data Conversions, Data Cleansing, Optimization needs are fulfilled with minimal impact or outage using ServiceNow and IT Service Management

?? Managed infrastructure capacity refresh in a defined datacenter and ensured minimal impact or outage during Storage (SAN/NAS) Data Migrations, Data Conversions, Data Cleansing, and Optimization using ServiceNow and IT Service Management.

?? Successfully managed 3 projects with a total budget of 300 million USD over 5 years, resulting in a productivity increase of 120% and project completion within 2.5 years, saving the organization a significant amount.

?? Owned and led the implementation of multiple complex IT infrastructure projects, meeting customer expectations for scope, cost, schedule, and quality.

?? Successfully delivered medium, large, and complex IT infrastructure projects involving financial planning, project schedule, resource and material management, design, implementation, and delivery using CA Clarity PPM.

?? Adhered to infrastructure build governance rules and tools to ensure project objectives, metrics, and quality standards were met or exceeded.

?? Facilitated regular meetings with business stakeholders, executives, and vendors, and actively participated in proposals and agreements.

?? Mentored team members on planning, execution, maturity, and process improvements, and established effective collaboration with customers, functional teams, and management.

?? Encouraged a constructive work culture and monitored the work progress of project engineers, onshore/offshore teams, vendors, internal and external partners, and subcontractors.

?? Demonstrated excellent business judgment, influential and transparent communication, and documented best practices and lessons learned.

Case Manager - Network Project Management
Telstra (01/2015 ??? 06/2017) Hyderabad, IND ??? Onsite and Brisbane, AUD - Remote

?? Implemented swift solutions for Network (Telecom, MPLS, WAN, Switching, LAN, Security, Load Balancing), ISP???s (4G, ADSL, Copper, Fiber), and VOIP Telephony, ensuring timely delivery and superior customer satisfaction.

?? Managed projects with budgets ranging from 1 million AUD to 40 million AUD and adept in project closure, in-time delivery to market, and technical operations.

?? Created, maintained, and tracked project plans, agreed deliverables, milestones, and commitments on timelines and budgets through Clarity PPM, RASS, and TEMPO management tools.

?? Managed diverse resources across global locations and efficiently dealt with cross-functional teams to deliver revenue-focused programs.

?? Handled program, project deliverables, and change management, prioritizing triple constraint and coordinating reviews, acceptance, and sign-offs from stakeholders.

?? Owned the process of ensuring best practices are followed throughout the project lifecycle and creating and maintaining standard works to enhance future program operations.

?? Provided design solutions to coordinate and facilitate requirements with line of service, clients, and business stakeholders.

?? Expert in implementing various routing protocols like OSPF, EIGRP, and Virtual Firewalls and Load Balancers in the network.

?? Proficient in managing risk assessment, issue management, program process, assessment and prioritization, mitigation plan, milestones, and detailed documentation.

Assistant Program Manager ??? Cloud and Infrastructure Services

CtrlS DataCenters Ltd (07/2012 ??? 01/2015) Hyderabad, IND ??? Onsite

?? Responsible for successful implementation of IT Infrastructure solutions in Data Center, aligning with policies and procedures for applications and databases using Identity & Access Management and enabling Single Sign-On secure authentication to ensure information security, for various clients and business sectors like Banking, Health care, FMCG etc.

?? Successfully implemented IT infrastructure solutions in data centers for clients in various sectors, such as banking, healthcare, and FMCG, ensuring compliance with policies and procedures for applications and databases using identity and access management and enabling single sign-on secure authentication to ensure information security.

?? Provided strategic approaches for designing and implementing new systems in accordance with organizational methodologies and standards, identified inter-dependencies between concurrent projects, and prevented downstream problems.

?? Meticulously analyzed businesses and abided by service level agreements (SLAs), accountable KPIs through close monitoring and interaction with the technical development team, and generated and maintained reports related to work status, maintenance, critical issues, and alternate methods.

?? Managed projects ranging from 10 million INR to 250 million INR and efficiently managed up to 40 projects simultaneously, ranging from small to medium-sized projects in a shared services environment for infrastructure, networking, IT services, customer helpdesk and support teams (L1/L2/L3).

?? Accountable for assigning, managing, supervising, delegating, and monitoring the workload of the Network Operations Center???s (NOC) shift operations (24x7x365) and personnel.

?? Demonstrated excellent written and verbal communication with business stakeholders, customers, leadership, vendors, execution teams, and service providers involved in projects.

?? Managed teams through periodic team meetings, 1:1 sessions, performance reviews, and supported teams by resolving issues, mentoring, and training as necessary.

?? Demonstrated effective negotiation skills, influential communication, problem-solving, and analytical ability within internal teams and external entities.

?? Participated in CAB meetings, periodic operational meetings, and provided support to teams in successful project delivery.

BMS Operations Engineer
Johnson Controls (I) Pvt. Ltd. (04/2010 ??? 11/2010) Hyderabad, IND ??? Onsite

Project Coordinator
WIPRO Infotech Ltd. (11/2009 ??? 04/2010) Hyderabad, IND ??? Onsite

Academic Credentials

?? Master of Technology, Embedded Systems, JNTU Hyderabad (2012)

?? Bachelor of Technology, Electronics & Communication Engineering, JNTU Hyderabad (2009)