Project/Program Manager
About Candidate
The candidate is an accomplished Information Security and Risk Management professional with a robust background in ISO certifications, compliance, and cybersecurity initiatives across various organizations. Currently serving as a Senior Information Security Manager, they launched a Trust Center with Salesforce integration, enhancing customer access to security reports and policies. They played a pivotal role in ISO 27001:2022 audits, achieving zero findings, and conducted a gap analysis for ISO 42001:2023, building a comprehensive control implementation plan. The candidate also revamped the security incident management process, ensuring more efficient and accountable incident handling. Previously, as a Quality, Risk & Information Security Officer, they were responsible for ISMS and QMS audits and implemented a Governance Risk Compliance (GRC) tool to streamline evidence collection and compliance. They led the successful attainment of multiple certifications, including ISO 27001, SOC 2, and ISO 9001, and contributed to drafting and revising key security and risk management policies. They also implemented Privacy & Security by Design within product management processes, aligning them with GDPR and ISO 27701 standards. As a Senior Project Manager, they enhanced process efficiency through automation, significantly improving policy revision workflows. The candidate also has experience in business development and sales engineering, where they achieved substantial revenue growth in the UAE and developed strategic market initiatives for product portfolios. They hold expertise in conducting audits, fostering a risk-aware culture, and providing executive-level reports on compliance and security matters. Additionally, their academic experience includes consulting on market strategies for the Indian automotive aftermarket and contributing to business development efforts in the Middle East.