sheelmani na

Seeking a challenging and rewarding opportunity with a leading organization to hone my analytical and technical skills to its true potential and utilize my experience effectively

• Manage vulnerability management for around 350+ users in a hybrid IT infrastructure.
• Enhance the vulnerability management and Patch management programs to align with Business Application Control Design Frameworks and system management requirements. 
• Prioritize and address critical vulnerabilities across all IT assets using a patch management system, effectively mitigating potential security risks. 
• Conduct comprehensive follow-up vulnerability scans to verify the effectiveness of risk mitigation measures. 
• Perform routine vulnerability scans and risk assessments on all assets and applications. 
• Test, prioritize, and schedule scanning activities while preparing detailed security reports. 
• Monitor Vulnerability scan and advice on risk-based vulnerability reports.
• Completed security assessments, provide recommendations, and communicate key findings based on industry frameworks and best practices.
• Identified and evaluate technology risks, internal controls to mitigate risks, and related opportunities for continuous control improvement.
• Contributed to the completion of third-party cyber risk assessments at the enterprise level. 
• Review scanning infrastructure, processes, and technology to mature Vulnerability Program in line with Information Security Methodologies. 
• Assisted in updating security configuration standards to meet Regulatory Guidelines and include required updates in standard images. 
• Effectively communicate the outcomes of cyber risk assessments to both internal and external stakeholders. 
• Provided research and advice on vulnerability, exploit, and patch/configuration change issues to identify impacts on the end system and associated applications. 
• Reduced social engineering attacks by 30% through the design and implementation of phishing campaigns in the organization. 
• Coordinated with key risk stakeholders to initiate, scope, and plan third-party cyber risk assessments for new and existing suppliers, adhering to Technology Risk management protocols.

Certificate of Cybersecurity