Surabhi G.

• Highly motivated professional with 14 years of experience in Cyber Security in various domains including Governance, Risk, Compliance (GRC), control assurance, audits, application security, vulnerability management & business continuity. • Working experience in various sectors and domains including banking and finance, retail, insurance and agriculture sector • Proficient in implementation and auditing various security frameworks but not limited to ISO 27001, ISO 9001, UAE Information Assurance, ISR Dubai. • Good Knowledge of OWASP Top 10, SANS 25, NIST, CIS Benchmarks, GDPR, PCI DSS, ISO 22301. • Proficient in handling end to end implementation of various information security projects, translate business requirements into technical requirements, conducting architectural level reviews, providing security related solutions for implementation and ensuring security requirements are incorporated in projects at various levels. • Excellent knowledge across various processes and domains like change management, incident management, access management, asset management, VAPT, disaster recovery, business continuity, back up and restoration, network segregation, SDLC, release management, privilege access management (PAM), cloud security etc • Hands on experience on vulnerability management and its various tools including HP fortify, HP Webinspect, Acunetix, IBM Appscan source and dynamic edition, Code secure, Nexpose, Burpsuite, Wireshark and Tripwire IP360. • Well versed with conducting audits, providing recommendations for the findings, managing stakeholders, maintaining audit evidences and tracking findings to closure. • Excellent knowledge and hands on experience in conducting risk assessments, control testing and reporting residual risk to management • Efficient in Evaluating existing/ related security processes and identifying requirements for new/improved security systems, to support the development of technological security roadmap • Efficient in evaluating project designs, web applications and mobile apps, and determine security compliance and overall security risk based on corporate policies, security requirements and industry best practices. • Handled multiple internal and external audits • Excellent inter-personal and communication skills • Excellent adaptability skills to new environments and quick ability to grasp things. • Excellent Analytical skills and decision-making capabilities. • Excellent in handling multiple projects at same time. • Willingness to travel across globe. Travelled across 16-17 countries across globe.