Ankkush Jain

• Development, implementation, and managing strategic, comprehensive information security, IT risk management, BCMS, TPSRM and Privacy program. • Comply with Security Standard IT Act, ISO 27001:2022 and other IT security statutory requirement. • Security assessment, validation, and clearance of developed /acquired applications for production launch. • Managing daily security operation and conduct a continuous assessment of current IT security practices and systems and identifying areas for improvement. • Assisting with the overall business technology planning, providing a current knowledge and future vision of technology, cloud security, and systems aligned to the security framework • Leading and implementing security products and solutions across organization like PAM, SASE, CloudSek, DDoS, Aruba NAC, DLP, SOC, C and Data Classification. • Communicating with senior management and the board of directors about the organization's information security posture. • Leading the information security team and ensuring that they have the necessary resources to perform their job duties. • Managing the organization's information security budget

• Independently perform end-to-end audits from initiation / risk assessment, planning, development of Work program and execution, and reporting. • Overall performance of audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidence, and documenting client processes and procedures. • Perform the Risk assessment of the new projects/requirement and existing technologies to ensure required CIA control are implemented as per Information Security policy • Update the company’s risk register. • Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, supporting infrastructure, and applications). • Ensure successful implementation of security projects like CyberArk, EOL devices upgrade, Azure PIM, Microsoft O365 defender and Azure Sentinel, SCOM monitoring tool. • Prepare and present Risk/Audit reports and dashboards to senior management. • Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. • Reviewing information security policies, Incident Response Plans, Change Management, and Vulnerability Management as they apply to the infrastructure in scope.

BT is one of the leading telecom companies in UK and serving globally in many aspects. I am serving one of the critical accounts of BT. Currently, I am working as an Information and Cyber Security Consultant. • Responsible for Client internal audits with supporting SSAE16, ISO27001 and IT General Controls. • Review engagement status with clients in monthly/quarterly meeting • Handling Presales activities like RFP, RFI, SOW and costing. • Review client’s contracts pertaining to Information Security clauses. • Depicted monetary savings for the client through effective Risk assessment and by applying appropriate controls. • Advise appropriate Information Security Risk Management controls to projects (Physical Security, Logical Security, HR/Legal, etc.) • Independent review/audit to ensure compliance with respect to contractual obligations, Client’s/BT policies and processes. Conduct periodic audit on projects. Provide advice and take action, where necessary, in response to Audit findings and recommendations. • Providing the consultancy for the high level solution designing related to datacentre and security products. • Review SOC2/1, Vulnerability Assessment and Penetration Testing Reports. • Review and assess organizational risks for acceptance and adherence. • Review the design and Operational Effectiveness for the security controls implemented. • Ensure security are in place for the migration of services from the legacy to the cloud environment. • Good understanding of SIEM tools & Threat Modelling. • Review the Design Effectiveness and Operational Effectiveness of controls implemented. • Maintain compliance to accreditations/certifications like ISO 27001:2013, HIPPA. • Align organizational security strategy and infrastructure with overall business and technology strategy.

• Performing and Managing Internal Audits(ISMS) • Handling external and Internal Audits for the IS projects. • Configuration Reviews, log analysis, Security Incident analysis etc. • SPOC for managing all ISMS related activities at organization level. • Part of different Table Top and Simulation testing for various projects • Periodic security audits of the firewalls. • Identifying IT related risks throughout areas including perimeter, network, host, application, data and physical security.

Hewlett Packard is one of the well known names in IT Products. It has a wide network spreaded all over the world. I am providing the WAN network support to Middle East, Europe & Africa for almost more than 1500 CISCO devices. Handling client calls and critical escalations with Service Delievery Managers to met SLA’s and create SOP’s for streamlining the project. Conducting Periodic reviews with the customer and to analyze calls and their trends to take proactive measures to reduce knowledge-based calls. Looking after the lines connecting business partners(BPs) of HP to Core and POP sites via MPLS & Frame relay Network. Taking care of problem and incident management via HP Open View Tool. Responsible for BGP connectivity between Autonomous systems (AS 65505, 7430) connectivity to AS 12641 (BT MPLS Cloud)& OSPF . To support the planning, implementation, installation and testing of network infrastructure changes and new installations, to meet customer requirements.

EXL is one of the fastest growing BPO in Industry, having Various Process across the world, having very good infrastructure with 3700, 4500 & 6500 series switches & 3800, 2800 series routers. AIRCEL LTD. is one of the fastest growing telecom company , Provided network support to all over INDIA Aircel offices for almost 2000 Cisco devices.

BCA