At EY, I conduct IT General Controls audits across 35+ applications and perform technology, process, and regulatory audits for clients, including banks. My work covers frameworks such as NIST, PCI DSS, and ISO 27001:2022.
I also conduct GAP assessments and audit ATM ecosystems, data centers, disaster recovery sites, and databases. I’ve performed baseline configuration reviews using Tenable Security Center and Nessus, with benchmarks including CIS and DISA STIG.
Previously, at SISA, I led PCI DSS compliance assessments for 15+ clients and supported the deployment of encryption and tokenization controls. Earlier, at Infocom Softwares Pvt. Ltd., I secured Linux and Windows production servers and supported data center infrastructure.
