Ishrat Ahmad

• Ensure governance to the Organization’s Information Security Policy and Standards across all Business units and support functions based on ISO27001 and other mandatory checks • Ensure compliance to the ISO 27001 and other regulatory requirements and adherence to the organizational information security policies and procedures • Manage external audits by coordinating with the Third parties, regulators and external auditors • Managing Information Security projects Requirements gathering, co-ordination Creation and maintenance of Project Plan Project documentation & Effective knowledge transfer • Report daily, weekly and monthly as per project requirements • Induction session for the new joiners in the Organization

• Designing and implementing an overall risk management process for the organization. • Performing a risk assessment: Analyzing current risks and identifying potential risks that are affecting the company. • Performing a risk evaluation: Evaluating the company’s previous handling of risks and comparing potential risks with criteria set out by the company. • Establishing the level of risk, the company are willing to take. • Creating business continuity plans to limit risks. • Conducting policy and compliance audits, which will include liaising with internal and external auditors. • Drafting information security policies and procedures. • Drafting ISO 27001/PCI RFIs. • Drafting CAIQ • Vendor Security Risk Assessment