ML
maria leti
Assistant Manager - Information Security at Xoxoday
Work Experience
Assistant Manager - Information Security
Xoxoday
Nov 2022 - Present -2 yrs, 7 months
- Job Details:Lead the implementation and maintenance of the ISO/IEC 27001 information security management system. Prepare responses to client questionnaires and RFPs on information security, compliance & data privacy-related areas. Provide support and clarity to customers and users of the information policies and cybersecurity policy framework. Develop, review, and update information security policies and procedures in alignment with ISO/IEC 27001 requirements. Conduct regular reviews of controls on the information security front. Conduct periodic internal audits and ensure the findings are closed. Validate ongoing compliance of policies and procedures in support of infosec requirements. Promote a culture of information security awareness and best practices among employees. Conduct training sessions and awareness programs to educate staff on security policies and procedures.
Optiv
Jul 2021 - Sep 2022 -1 yr, 2 months
- Job Details:Qualys vulnerability management - PCI DSS. False positive reviews, IP removal, reviewing and interpreting assessment and scan results, approval of scans to be attested, support related to vulnerabilities detected, address client queries and provide support within SLA. Onetrust vendor and risk management, LogicGate TPRM, patch management, threat and DLP security, internal auditing, ISMS policy management.
Torry Harris Business Solutions
Sep 2019 - Jul 2021 -1 yr, 10 months
- Job Details:Internal audit representative for ISO 27001, PCI DSS and Strada. Patch management via Desktop Central every month. Zero day vulnerability patch analysis and patching on all endpoints. Cyber security analysis monitoring of endpoints for threat on daily basis.
Rossell Techsys
Dec 2017 - Sep 2019 -1 yr, 9 months
- Job Details:Audit representative for ISO 27001. File folder access control Windows Server 2010. Managing Exchange Server 2010. Active Directory user control and group policy management.
Education
Bachelor's Degree in Electronics and Communication Engineering
VTUJan 2012 - Jan 2016 - 4 yr
Skills
- Risk Assessment
- Process Improvement
- DLP
- ISO 27001 implementation & maintenance
- GDPR
- CCPA
- HIPAA implementation & audits
- Internal & External Audit
- Incident & metrics management
- Vulnerability Management
View More
Languages
English
BeginnerHindi
BeginnerTamil
BeginnerKannada
Beginner