Led ISO 27001 compliance and certification efforts for organization, conducting risk assessments, gap analysis, and developing corrective action plans. Collaborated with IT teams to remediate identified vulnerabilities and track progress on mitigation efforts. Prepared detailed vulnerability assessment reports, including risk assessments for stakeholders and management. Assisted in vendor risk assessments and due diligence to evaluate security and compliance posture of third-party providers.

Provided expertise in developing and implementing ISO 27001:2013 ISMS standards. Conducted risk assessments, vulnerability assessments, and penetration tests to identify security weaknesses. Collaborated with IT teams to implement security controls, including access management, encryption, and firewall configurations. Assisted in preparing documentation for ISO 27001 certification and managed communication with certification bodies. Participated in internal and external audits, addressing audit findings and ensuring corrective actions were completed.