Sabyasachi Hazra CISSP ISSMP, ISSAP ,CISA AAISM,AAIA,CCSP,CCNP,CCSA,CCSE,CCZT,CCSK,CCNA,AWS,

Security Risk Management • Risk Assessment • Risk Evaluation Security Management • Development of security policies & procedures • Design of risk management methodologies • Design of security processes IT Infrastructure • Design of security Architecture • Documentation of required hardware Network Management & Security Management • Manage the overall administration of LAN & WAN systems which include design of network layouts • Oversee installation of IT Assets, Routers/Switches/Modems Project Management • Plan project activities viz. scoping, estimation, tracking, change management, delivery management and post implementation support. • Implement project plans within preset budgets and deadlines. • Client meeting as per requirement • Timely update of the project status to required stakeholder of the project • Publish Dashboard as per the requirement • Design & document of scope of work • Design & document product implementation manual. Technical Support • Implement & manage network and end point DLP • Implement & manage SIEM products • Implement & manage firewalls and IPS Audit & Compliance • Perform internal security audits for several environments and network infrastructures. • Create functional specifications for internal IT audit & suggesting solutions People Management • Provide direction, motivation & training to the IT / Information Security personnel for ensuring optimum performance and enhance their professional and soft skills.

Leaded - Malware defense team Management of Symantec Antivirus for the client. Management of Websense Web filtering for the client. Management of Websense DLP scanner for the client. Auditor function: Responsible for conducting internal IS audits. Scope of audit is checking compliance against Bharti Airtel Information security policy, which is mapped with ISO 27001:2005 domains and aligned with related security controls. IS audit scope includes Network devices, Security devices like Firewalls, IDS and Security processes such as Patch management, User Id management, Vulnerability Assessment. Auditee function: Responsible for coordinating Internal/External auditors and circle office teams which are undergoing for audits. This includes responding to Initial data requests received from auditors, vetting the data / artifacts provided by circle teams in response to queries / data requests raised by auditors during review activity. Provide management comments to the non-conformities raised by auditors based upon the upcoming projects or commitments from management to close these observations. Follow up with respective issue owners for closure of these Non compliances within agree timelines. Acted as subject matter expert for risk and controls - providing expertise on business processes, critical risk issues and key controls, operational loss management and risk mitigation strategies. Involved with application and infrastructure risk assessment ant control definition. Documentation and Designing of the Implementation Manuals and Process required for the OS audit and compliance check.

Deployment of Network and End Point Data Loss Prevention (DLP) - Websense DSS and Symantec DLP Deployment of Content Filtering - Websense Security Gateway Deployment of NIPS and HIPS - ISS Proventia IPS Reviewing and Approving the Changes from security perspective. IT Operations Handled: Shared Privilege User ID Management: Leaded - Privilege User ID Management Team To provides a historic view to the users requesting privileged access to their Business Critical Systems against specific Requirements. Managing the logs and activities of privilege access and providing Audit Trail logs for RCA. Quarterly Validation Users IDs and Addition / Deletion of Users IDs and validation of roles granted to the same Vulnerability Assessment Management: Leaded - Vulnerability Assessment and Threat Mitigation Team Management of IBM ISS Proventia enterprise scanner for the client. Getting the scan complete as per schedule and then coordinating with the various circle SPOCs for closure of the discovered vulnerabilities. Review the Vulnerability Assessment reports for devices on the client's IT Infrastructure. Also emphasize on early closure of the discovered vulnerabilities without any business impact.

Roles & Responsibilities: Managing a team to handle the support various accounts Configuration and troubleshooting of wan, Pix firewall, FWSM, Checkpoint, Websense ,Cisco IDS, IPS & Nokia Appliances. Security Assessment and support Pen test using Tools and Applications for specific clients. Risk Management.

Roles & Responsibilities: Projects handled for HDFC (Head office), Bank of Baroda, MTNL trustline CA Managing team to handle the Security operations Configuration and troubleshooting of wan, Pix firewall, FWSM, Checkpoint, Antivirus, Cisco IDS, Nokia Appliance. Maintenance of wan and LAN structured with HP Proliant servers and Cisco switches and routers. Quarterly Pen test using Tools and Applications.

Detecting the reasons for connectivity problem -and providing solutions to them Maintenance and configuration of machineries like Compaq Proliant Server, Terminal Services Servers, Switches & Hubs, Windows 2000 server Installations of different major Software like Windows NT, Windows 2000 Server and Professional, MS-Office 97,2000, SQL Server-7.0, MS-Exchange Server, Internet Exploler-5.0. Wan support on Cisco routers and switches Pix installation and configuration Security Assessment