At Turnberry Solutions, I execute and validate SOX and ITGC controls, coordinate audit evidence, and track control observations through remediation. I also perform User Access Reviews for financial and enterprise applications.
I build Python workflows for evidence collection, data validation, and compliance reporting, and use Power BI dashboards to show control status and remediation progress. My work also supports IAM and PAM governance using Thycotic, Microsoft Entra ID, and Okta.
At Orange Business Services, I performed ISO 27001 risk and gap assessments and automated audit-log analysis and compliance reporting with Python, Pandas, and OpenPyXL. I also integrated SAST and DAST activities into CI/CD workflows and applied threat modeling to identify application security risks.
As a freelance VAPT professional, I assessed web applications, APIs, mobile applications, thick clients, and infrastructure, then documented vulnerabilities and remediation recommendations. I also published security research on the MQTT protocol on ExploitDB.
