Experienced Professional working on information security aspects for Applications, TPRM and vendor due diligence activities. Implemented and delivered Third Party Risk Assurance reviews based on approved process and plan. Professional experience in Internal controls and due diligence activities for multiple clients over - IT risk assessment and management - IT General Controls (ITGC) - IT Application Controls (ITAC) Designing information protection strategy, governance structures, control framework design, organizational design, policy assessment, Info-Sec framework development (SOX, ISO27001, ISO 22301, ISO 20000, NIST), Risk assessments & Business risk assessment