At MANIERE SOFTWARE & TECHNOLOGIES, I led end-to-end ISO/IEC 27001 implementation, from the Statement of Applicability and internal audits to external audits and certification readiness. I also supported surveillance audits and client-led security assessments.
I assess third-party security and privacy risks by reviewing vendor questionnaires, SOC reports, ISO certifications, and supporting evidence. I track control gaps and remediation, review security clauses in vendor contracts, and have responded to 60–70+ client due-diligence questionnaires, RFPs, and security assessments.
At INFOSYS LTD, I conducted ISO/IEC 27001 audits, collected and validated audit evidence, and prepared reports with findings and remediation plans. My work also covered NIST CSF gap assessments, IT General Controls, access controls, and vendor risk.
Earlier, at DXC TECHNOLOGY, I supported internal audits, audit walkthroughs, ITGC assessments, and third-party risk management. Across these roles, I’ve also contributed to SOC 1 and SOC 2, PCI DSS, GDPR, and business continuity compliance activities.
