Saumya Malik

WORK HISTORY

EDUCATION

SKILLS

ABOUT SAUMYA MALIK

Experienced Information Security Associate with a demonstrated history of working in the information technology and services industry. Skilled in Information Security and Data privacy audits and providing consultation for carrying out risk assessments3. Strong operations professional with a Master’s Degree focused in Total Quality Management from Lucknow university.4. Travelled onsite for providing consulting services related to ISAE - SOC implementation and quality assurance for the client based in Germany.5. Implemented SOC 1 & SOC 2 - Type 2 internal controls based report6. Part of DRBC team which includes running DRBC drills, carrying out analysis at the time of disaster/incident, preparing DRBC report7. Part of GRC team to implement NIST and different frameworks based best practices for IT controls8. Experience and ability to successfully setup and implement information security, data privacy practices and process across organization9. Conducting periodic Vendor Risk Assessments for all the critical vendors for the organization10. Acting as Risk advisors/consultant for the accounts/projects along with business enabled functions (Admin, HR, IT).11.Develop, implement, and enforce policies and procedures of the organization\'s privacy programs in accordance with information security and data privacy.12. Partner with all key business areas, in particular the IT Team, to ensure data privacy issues are considered at the outset of new projects, products, and initiatives13. Responsible for responding to Client Security assessments, RFP/RFI for new bids14. Reviewing Contracts from InfoSec & Data Privacy perspective to ensure compliance.15. Conducting Server commissioning and De commissioning audits wrt Security and privacy controls15. Conducting other technical audits such as SFTP audit, Zscaler audit, Cloudflare audit, Firewall review etc.