Suman Singh

WORK HISTORY

EDUCATION

ABOUT SUMAN SINGH

Implementation and maintenance of Information Security Management System (ISMS) compliant with ISO 27001:2013 #Monitor and implement the information security function in accordance with the established policies and procedures #Identifying information security goals that meet business requirements and checking whether the ISMS is properly integrated into the organization’s processes #Plan and conduct periodic process audits both technical and governance, record findings, analyse trends and report results by creating Information Security dash boards for senior management #Ensure that procedures and controls are correctly implemented that are capable of promptly detecting and responding to incidents, as well as review and oversight of information security incidents #Maintain an up to date awareness of the Information Security industry, focusing on new or revised security solutions and improved security processes #Identify and assess the impact of information security threats, vulnerabilities & risks and assess business security risks with a view to recommend security controls that will enable the Business to manage those risks effectively #Analyse awareness needs and plan activities including awareness sessions/campaigns across the organization #Analysis & report General and Technical Metrics #Perform Application Access Audits #Work with external & internal auditors as required #Review and maintenance of ISMS documentation #Identify, analyze and evaluate risks and co-ordinate Risk assessment exercises and other ISMS activities across functions #Design policy framework based on ISO 27001:2013 #Conduct ISMS audit for clients #Develop and maintain audit checklist and documents #Work closely with the VAPT team #Create and update the hardening checklist #Help client to upgrade from the old standards e.g. ISO 27001:2005 to ISO 27001:2013 #Perform risk assessment and impact analysis #Conduct training sessions for clients and the internal team