Sangeeta Patel

18+ Year of Experience in IT & Information Security Domain Current Responsibilities: - Cyber /Regulatory Governance: - Performing Information security & Cyber security reporting to RBI and other regulatory bodies such as SEBI, PFRDA, CERT-In, NPCI, NCIIPC as per requirement. Also coordinating /communicating to RBI Personnel during onsite RBI Inspection for collection and submission of required details and during another regulatory requirement as needed. - Policy Framework: - Working on Information Security and Cyber Security Policy Creation and review as per defined frequency. - ISMS: - Successfully design implementation, operation and maintenance of the Information Security Management System based on the ISO/IEC 27001:2013 standards, including certification against ISO/IEC 27001 for IT Department & Call centre Environment. This includes coordination and implementation of security controls in the functions such as Physical Security/Facilities, HR & Call centre. - GRC Tool: - Working on Automation of compliance and other modules via GRC Tool Archer to collect data and provide centralised console for MIS purpose. Modules worked includes Exception, compliance, third party management tool, Issue management for raising finding. Implementation of Service Now GRC module and migration of data from Archer tool. - Audit & Compliance: - Responsible for interacting with external audit teams (Statutory /surveillance) wherever applicable. Co-coordinating and closing audit observation w.r.t required control. Performing ISMS audit/review for internal team. Working to meet internal compliance requirements. - Risk Management (Technical /Process): - Identify and understanding of technical risks and experience in performing/ overseeing assessments such as VA/PT/AppSec /Security architecture review etc. Updating Risk register with identified IT Risk. Performing information security risk assessments and controls selection activities. Professional Certification: - CRISC - ISO 27001 Lead Implementer - CISA - ITIL Foundation Certificate in IT Service Management - Cisco Certified Network Associate (CCNA 640-801) - Cisco Securing Networks with PIX and ASA (SNPA 642-522)