A competent professional with 14 years of experience in Information Security & Risk Management. Cloud security governance to ensure environment is audit ready. Service Delivery by ensuring security deliverables to customer in line with the contractual requirements and defined compliance levels. Publish monthly security metrics and dashboard to customer to provide overview of infrastructure hygiene and status of security roadmap. Security Risk Assessment for critical business functions, application and infrastructure components to identify potential security gaps, publish report and discuss findings with key stakeholders for further action and remediation. Process Transformation to meet the organization/customer requirements and ensure security hygiene e.g. Vulnerability Management, Patch Management, Agent Health etc. Business enablement by working closely with business and infrastructure teams to assist in security related issues. Coordinate with corporate security and technology teams for service enablement and improvements e.g. Integrations, Software usage, Product upgrade, Report automation, Security Awareness etc. Security Assurance by represented Information Security team in client audits, responded to customer security questioner. Application Risk assessment for internal and vendor applications to calculate inherent risk of the application, coordinate with application owners for timely closure of findings. Ensure certification and compliance with ISO 27001 by perform internal security audits as per ISO 27001 standard. Follow up with respective teams for closure of findings identified during audit. Metrics Transformation which includes mapping of traditional metrics requirements in line with industry best practices to assess the effectiveness, identify deficiencies and prioritize the area that need more focus.