Ashish Bajpai

Background

About Ashish Bajpai

Currently working as Information Security Lead in Fiserv Global Services and responsible for conducting Information Technology and Security Audits, User access management reviews, PCI DSS & ISMS certification, Review of Policies and Procedures related to IT and Information Security. Application Security Auditing with reference to company & industry best practices for the evaluation and improvement of Control and IT Governance processes. Previously Worked with Ernst & Young (EY), Risk Advisory for Conducting assessment by identification of the organization’s critical information assets through an exhaustive analysis and development of asset registers, assessment of the existing critical systems; and prepare the organization for ISMS and other certification (ISO 27001, PCI DSS, ITIL standards etc). The area of work includes national and international PSU’s, BPO, Telecom and IT sector. Working with M/s Tech Mahindra Ltd. as Senior Security Consultant. The primary role was Security and Process consultant for their Enterprise Security Consulting Group. I have worked majorly on Web and Application security testing projects including Security Analysis and testing the Applications for the entire SDLC on various Authentication and Management Systems based projects for Govt of India and UK based telecom Clients. Specialties: ISO 27001 Audit, PCI DSS certification, Information System readiness Audit. Audit of IT and Information Security Policies and Procedures. Web & Application Security Analysis. Baseline Security Audits and Security Log analysis. Application security and network vulnerability Assessment using different security tools. • Certified Information Security Manager (CISM) • Certified Ethnical Hacker (CEH). • ISO27001 Certified Lead Auditor (Trained).