• Proven leader in Audit (IT and Cloud), Third-Party Risk Management (TPRM), Information Assurance, and Cloud Security Compliance with over 20 years of experience managing and executing enterprise-wide programs for large healthcare (provider and payer) and IT organizations. • Passionate design thinker with a growth mindset and an ability to harness innovation by facilitating collaboration to develop from the ground-up, audit program, TPRM program, Cloud Security Compliance, and enterprise-wide cybersecurity risk assessments (onsite and remote) leveraging HITRUST CSF, NIST, ENS Compliance, ISO Series (27001, 27002, 20243, and 27017), HIPAA Security Rule, PCI DSS, SIG, CSA (CAIQ, CCM, and IoT Framework), SANS CIS Critical Security Controls, and OWASP Top 10. • Trusted advisor to business and senior executives to articulate critical issues to business risks. • Skilled leader with a growth mindset and significant experience building and developing efficient, cross-functional diverse global teams and managing personnel in the USA, India, Ireland, and the Philippines. Specialties: • HITRUST CSF and Assurance Program • HIPAA Security Rule Compliance Audits • PCI DSS Compliance Assessment • ISO27001 / 27002 ISMS Audits • ENS Compliance • Cloud Security Compliance • Cloud Security Risk Assessment • Cyber Risk Assessment and Remediation • Third-Party Risk Governance • Third Party Security and Privacy Audits • Cybersecurity Audits • IoT and IoMedicalT Assessments • Vulnerability Assessment and Penetration Testing • Web Application Security Assessments • Program Management Technical Working Experience: • Cyber Risk GRC Solutions : RSA Archer, NavexGlobal, ProcessUnity, Recorded Future, BlackKite • Agile Project management and collaboration tools: Trello, Certifications: • AWS Certified Cloud Practitioner • AWS Cloud Audit Academy • AWS Cloud Security Essentials • ISC2 : CISSP • ISACA : CRISC, CISA, CISM, CDPSE • HITRUST Certified CSF Practitioner (HCCSFP) • ITIL (F) • PROSCI Certified Change Practitioner Leadership Experience, Memberships, and Speaking/Publishing Engagements: • SME(CSA Working Groups): CCM, Cloud Incident Response, CAIQ, Enterprise Architecture, IoT, Security as a Service(SaaS), Health Info. Mgmt • Working Group Member : ISACA’s CRISC Certification : 2020, 2021 • SME Reviewer, ISACA’s 2019 Risk IT Framework & Practitioner Guide Publications • APMG/ISACA Accredited Trainer for CISM & CISA Trainings, through 2023.