I am an Information Security Advisor and Subject Matter Expert (SME) in Third-Party and Vendor Risk Assessment, with over 12 years of experience in planning, implementing, and evaluating comprehensive Information Security Management Systems. Alongside my specialization in Third-Party risk, I possess extensive expertise in ISO 27001:2013 controls (audit and implementation), Cybersecurity Strategy and Governance, Business Continuity Planning, Networking, Data Center operations, and IT Infrastructure management. Certified as an ISO 27001:2013 Lead Auditor and CPISI DSS V3.2 professional, my core competencies include: Third-Party and Vendor Risk Assessment and Management Cybersecurity Strategy and Planning Governance and Compliance Risk Assessment, Mitigation, and Continuous Monitoring Security Awareness Training ISO 27001 Implementation, Compliance, and Auditing Policy Development and Gap Analysis IT Infrastructure Operation and Management Proficiency with tools such as ServiceNow, ProcessUnity, and RSA Archer Known for my analytical, strategic, and disciplined approach, I am committed to delivering effective security solutions that help organizations strengthen their security posture and manage risk with confidence.