• Analysed existing risk management procedures and performed gap analysis
• Developed improvement proposals to enhance the effectiveness of risk management
• Ensured alignment with industry best practices and regulatory requirements

Security compliance document analysis in automated way, document generation using pattern matching techniques

• Huge complexity and number of documents required for Security Assessments pose challenge for accuracy and completeness
• Pattern matching and rule-based analysis applied for requirements analysis and data generation
• Document generation and formatting for final document submission in automated, adoptable way, effort optimization achieved

• Analysed reports of Tripwire, Qualys, Symantec CCS, conducted various CVE reviews
• Assessed the impact and criticality of vulnerabilities and aligned with management for necessary actions
• Reviewed existing processes and proposed enhancements to strengthen vulnerability management

• Developed a rapid assessment framework for low-effort analysis and evidence generation
• Aligned supplier security procedures and developed an impact analysis toolset
• Ensured comprehensive evaluation of Core systems and identified improvement opportunities

• Reviewed proposed requirements and thoroughly studied supplier architecture
• Conducted a comprehensive assessment, summarizing findings for effective team presentations
• Ensured alignment with security standards and identified areas for improvement

• Defined project scope and collaborated with suppliers (MDE, Microsoft Defender Endpoint Security) to ensure successful implementation
• Acquired and Allocated budget, provided reasoning for the project, ensuring optimal resource utilization
• Led project planning, guided the team, and conducted result reviews, fine-tuning as necessary
• Delivered impactful management presentations to keep stakeholders informed and engaged

• Analysed global security requirements and proposed a roadmap to introduce CyberArk into the supplier's Core infrastructure
• Conducted in-depth analysis and delivered informative presentations to key stakeholders
• Presented results to supplier and triggered improvements

• Reviewed requirements definition documents for security and discussed relevance
• Analysed compliancy and reasoning of supplier and related supply chain parties
• Discussed analysed results with stakeholder and presented conclusions
• Summarized and ranked options and parties, evaluated winning parties
• Ensured alignment with overall strategy and corporate vision

• Developed comprehensive training materials covering basic and advanced security concepts
• Conducted engaging training presentations and assessment activities
• Focused on vulnerability management and other key security areas