Sunil Pandya

About Sunil Pandya

Perform gap analysis and control evaluation of Hybrid environment (Cloud and On-Prem),…

Experience

1. Principal Consultant

   Infosys

   Aug 2016 — Present

   Managing projects related to Information Security Audits & Compliance, Application Risk assessment, Network Security Architecture Assessment, Identity and Access Management, Security Operations and Security Monitoring, Secure Web & Application hosting, Application Vulnerability assessments & Penetration testing, and IT Infrastructure management including IT Support, Services & Governance framework Design review and implement security solutions and architecture, implementation of best practices Cyber Security and Technology Risks management for various frameworks ISO 27001, PCI DSS, NIST CSF,SOC1 and SOC 2, CYBERSECURITY Maturity Model (CMMC) Assessment and Secure Control Framework Develop,implement and maintain the Third Party Risk Management Framework for the Enterprise Support development and implementation of relevant policies, standards, procedures, frameworks and requirements relating to management of Third-Party Risk Support remediation of Audit and Regulatory issues and findings relating to the design of the Third-Party Risk Management policies, standards, frameworks, and requirements Cloud Security assessments

Education

• D Y Patil College

  B E Industrial Electronics, Electronics Communication, Digital Circuits, Basics of Networking, Networking Essentials

  1990 — 1994

Skills

• Splunk Certified Power User 6.3
• Security
• Virtualization Security
• Network Security
• Payment Card Industry Data Security Standard (Pci Dss)
• Security Architecture Design
• Networking
• Ccna
• Juniper
• Itil
• Linux
• Onsite-Offshore Delivery Model
• Vulnerability Assessment
• Unix Security
• Technical Audits
• Technicak Risk Assessment
• Security Controls
• Penetration Testing
• Application Security Architecture
• Cisa
• IT Service Management
• Risk Assessment
• Data Security
• Information Security Standards
• Virtualization
• Iso 27001
• Dlp
• Siem ( Security Incident and Event Management)
• Enterprise Risk Management
• Information Security Governance
• Information Security Management
• Siem
• Solution Architecture
• Pci Dss
• Iso 31000
• Linux Security
• Managed Security Services
• Cross-Functional Team Leadership