At CSG Systems International, I led ISO/IEC 42001 implementation for an in-scope SaaS product, covering AI risk and system impact assessments, governance standards, and certification readiness.
I also led ISO/IEC 27001 audit readiness and control assurance across six SaaS products, managing certification activities through recertification and surveillance audits.
For two SaaS products, I led PCI DSS v4.0.1 compliance programs, coordinating scope definition, attestations, assessor walkthroughs, evidence validation, and remediation tracking.
My work also includes product risk assessments in OneTrust, customer security assurance, and maintaining 30 information security policies, standards, and procedures. Earlier, at Infosys Limited and Skava Ecommerce, I supported ISO 27001 compliance, risk assessments, and policy management.
