Suraj Tripathi

About Suraj Tripathi

Information Security and Cyber Security Professional with 7+ years of experience in• Information Security Management System (ISMS) ISO27001• Cyber Security Assessment based on Industry Best Practices & Framework (ISO/IEC27001, CIS, RBI)• Vulnerability Management • Identity and Access Management • Project Management• IT Audits• Risk Assessment & Risk Management.• Application Security Assessment, Mobile Security Assessments & API Security testing• Strong understanding of security vulnerabilities and remediation as listed in sites like OWASP, SANS etc.• Security Audit on networking devices (Firewall, WAF, IPS)• Penetration Tester.• Prepare & Plan VAPT calendar for NBFC, Logistic, Health & Insurance based sectors as per Standard & Security Guideline.• Solved 40+ machines of HTB and prepared the Reports.• Learning Cloud Security Assessment.

Experience

1. Information Security Manager

   ICICI Bank

   Sep 2022 — Present · Mumbai, IN

   Manager Technology & Information Security Risk Oversight, Governance at ICICI Bank Ltd.Reporting to Information security Leadership team.1. Carrying out assurance reviews, to determine compliance against policies and overseeing control testing.2. Working on effective challenges of risk and mitigation plans.3. Leading Red Teaming Activity to manage organization’s security status by achieving business security objectives & apprising Leadership team on regular interval in Board & Risk management meetings.4. Work on Root cause of Information security Risk & Vulnerability.5. Risk Identification, Assessment, Treatment, Mitigation.6. Remediation for the gaps identified with the help stake holders, business units, IT team and outsourced partners.7. Application Security Assessment.8. Examining and challenging technology incidents and risk events, to ensure root cause is determined and credible actions are identified to prevent, avoid or mitigate future occurrences.9. Regulatory guidelines assessment, gap analysis report submission to management, stake holders and Regulators10. Monitor and track issues and reports.11. Working on Multiple Information security Risk Oversight Projects.12. Co-coordinating with multiple Security partners.13. Understand and execute technology risk assessment across various technology risk domains14. Vendor Management, SLA Management, PO Approval and Project Management.

Education

• Nirmala memorial foundation college of science and commerce

  Bachelor's degree, Information Technology

  2015 — 2018