IdentityI have complety my engineering from Rizvi College of engineering in 2015. I am teaching in edu world classes since 2014.
subjects
HSC- IT (Commerce, Arts, Science)
FYJC - IT (Commerce, Arts, Science)
HSC - Computer Science (Science)
F.E- SPA ( Structural Progmming approach)
Professional courses- Basic C, HTMl, C++, Core Java, DBMS
1. A dynamic professional with more than 3 years of experience in IT risk consulting.
2. Expert in validating IT General Controls of various clients including Change Management, Incident Management, Access to Program and Data (User management), Computer operations and Program Development.
3. Expert in the following IT assurance and advisory services:
I) IT policies and procedures
II) Governance of IT
III) IT risk assessment and preparing risk control matrix (RCM) & testing design and operating effectiveness of controls.
IV) Service Organization Control (SOC1/2/3) audit and reports (ISAE 3402)
V) SOX IT controls testing
VI) Gap Assessment and Readiness Review for audit
VII) General IT controls reviews
VIII) Detailed operating system reviews (Unix, Windows)
IX) Database reviews (Oracle, SQL servers)
X) IT disaster recovery & Business continuity reviews
XI) Cyber Security assessment
4. Experience in auditing and reviewing business process controls. Evaluating of processes and identifying and potential risk. Mitigating risk through controls and reporting over process gaps with improvement suggestions.
5.Experience in data center Audit. Preparing checklist of logical and physical access & environmental controls for data center audit.
6. Experience in audit of ISO 27001. Facilitating client audits as per agreed contractual terms. Taking care of entity wide information security planning and executing internal Information Security Audit against organizational policies and SOP's, in line with ISO 27001. Recommending security controls from compliance perspective and ensuring the controls are in place as per the compliance standards.
7. Experience in performing analysis of SSAE and ISAE reports and validating CUECs (Complimentary User Entity Controls).
