Ritwik Pathak

Background

About Ritwik Pathak

WORK EXPERIENCE:   Experience in Technology Risk Management/IT Audit Management /Change Management/Compliance/Operational Risk/Operations having several years of work experience in different Organizations. Experience as a Scrum Master taking care of all scrum ceremonies or events (Sprint Planning Daily Scrum Sprint review and Sprint Retrospective) and handling various stakeholder management  Coordinate and/or perform regular Infrastuctural and Web Application vulnerability assessments  Work Experience in ITGC and ITAC controls Testing and Review of Team work  Identify and maintain the vulnerability management corporate platform in order to prompt identify weakness in the internal and external perimeter including Cloud infrastructure;  Monitor the identified security vulnerabilities or misconfiguration and support the IT stakeholders for remediation;  Enforce VM processes and procedures to ensure also the right coverage and security of the Corporate Business Infrastructure and Web Applications;  Collaborate with GIS teams to develop or optimize automations used for vulnerability tracking and reporting;  Support to adopt security best practices and security standards applied by the organization.  Experience in IT General Controls (ITGC) SOC1 SOC2 SOC3 SOX or ASAE Audits.  Good knowledge of IT risk and security frameworks and common standards (e.g. CoBIT COSO ITIL ISO 27001 Sarbanes Oxley Act NIST)  Demonstrating a thorough understanding of complex information systems and the client's business/industry;   Promote new ideas and new ways of executing projects and internal infrastructure enhancements.  Knowledge of industry best practices in Vulnerability Management and Compliance areas; (e.g. NIST and CVSS - Common Vulnerability Scoring System frameworks)  Experience in management and configuration of vulnerability assessment platform (VSDI KENNA Nessus Qualys)  Experience with administration of ITSM solutions used for vulnerability tracking and reporting (Service Now/Jira)  Experience with OWASP Top 10 assessment and methodology and CIS hardening standard;  Experience with various cloud providers (Azure Google Amazon) and knowledge on methodology how to secure them;  Experience on enforcement of VM operational Security process and procedures;  Experience with penetration testing assessment red/blue team activities and security monitoring;  Effective communication skills to interface with both internal and external stakeholders for Information Security Data Privacy