• Designed and implemented a global vulnerability management program across IT & OT business units.
• Coordinated penetration-testing programs across multiple global divisions.
• Provided Executive Cyber Threat Briefings to the Group CIO, highlighting risk-informed security investments.
• Led vulnerability prioritization and remediation coordination with infrastructure and application teams.
• Advanced vulnerability prioritization with EPSS, CVSS, CISA KEV and other threat vectors.
• Led Risk assessments and vulnerability exception processes for critical systems.
• Assisted in the development, implementation and maintenance of the organizations BCM framework.
• Collaborated with business stakeholders to gather requirements, define project goals and manage expectations.
• Facilitated decision-making processes and conflict resolution among team members & stakeholders.
• Collaborated with OT Security Architects to implement industrial network segmentation & risk mitigation strategy.
• Supported internal and external security audits.
• Developed project plans, sprints roadmaps and release schedules.
• Managed annual cyber security tooling budget and vendor evaluation for my services.

• Contributed to the design and implementation of information security governance processes.
• Developed and implemented enterprise security policies and guidelines.
• Performed risk assessments to evaluate threats, vulnerabilities and potential business disruptions (BCM)
• Built a structured vulnerability management framework, including policies and remediation workflows.
• Conducted security risk assessments across offices in 24 countries.
• Supported GDPR-related security approvals and incident response processes.
• Managed Enterprise Email Security Platform & conducted organization-wide phishing awareness training.

• Managed a vulnerability-scanning infrastructure including distributed scanning engines & credential scanning.
• Managed automated vulnerability scans, automated ticketing system and risk-based remediation prioritization.
• Worked closely with infrastructure and patch management teams to improve remediation efficiency.
• Advanced vulnerability prioritization with EPSS, CVSS, CISA KEV and other threat vectors.
• Manage and integrate SAST /DAST/ IAST findings into CI/CD pipelines and DevSecOps workflows.
• Consulting & Support for development teams in Application Security & SSDLC.
• Managed project scope, schedules, resources, risks and deliverables through the project lifecycle.
• Making different security policies and complete framework of patch management cycle.
• Supporting SIEM logs, Web Security Appliance, Email Security Appliance, ddos Alarms, DNS Analytics.
• Investigated phishing incidents and suspicious emails reported by employees.

• Ensured product security compliance for external safety and certification audits.
• Managed security patch releases for enterprise customers.
• Responsible for both enterprise and product security assurance.
• Evaluated secure communication channels between POS terminals and backend servers.

• Conducted research & controls mapping on security standards including NIST, BSI, and IEC 62443.
• Designed a Purdue Model-based OT/IT security laboratory environment.
• Implemented intrusion detection and prevention using Fortigate firewall and Nozomi OT security platform.
• Developed and executed three attack scenarios to validate the effectiveness of the monitoring architecture.

• Supported real-time sensor data infrastructure during live sporting events.
• Resolving NTP issues, Implementing firewall rules and system hardening on Linux servers.
• Configured file integrity monitoring tools to support IT security audit compliance.

• Supported networking and cybersecurity laboratory sessions.
• Working with Cisco routers, switches, firewall and encryption techniques in the lab.
• Guide students to a networking and security lab consisting of OSPF, EIGRP, BGP, Nmap, and firewall working.
• Setting up a firewall (UFW & IP tables) and 2-factor authentication on Raspberry Pi.
• Developed practical demonstrations of security attacks including DNS spoofing and SSL stripping.

• Conducted security analysis of ZigBee smart home devices.
• Demonstrated replay attacks on smart home communication protocols.
• Conducted hardware security testing using UART, JTAG, SPI and I2C interfaces.
• Developed a proof-of-concept attack environment using Raspberry Pi.

·   Provided support for IT security audits, including preparation of evidence, documentation review, and facilitation of audit requirements.