Arvind K Vira
About Candidate
| Goal oriented IT Audit professional seeking opportunity in GRC / Cybersecurity / Information system audit Compliance position with a stable organization, with a total of +25 years of experience of which 6 years in Information Security audits + 20 years in the IT industry, and 4 years in industrial Electronics. Have worked in the areas of IT Audits, ISO 27001 Implementation / Internal Audits, Risk Management, Business Process reengineering, Business Continuity, Data Centre Operations, and Information Security Management, worked on multiple projects with various industries. Have worked with various industries managing and delivering engagements with a focus on Banking, Retail, Financial Services, Certifying Authority (CA), Stock Exchange, Information Technology (IT), Information Technology Enabled Services (ITES). Past projects and assignments includes extensive background in all stages of audits including planning, study, evaluation, and testing of controls; reporting; and follow-up new system implementation assessment, internal control review, Cybersecurity Audit, IT General Controls Audit, business analysis and regulatory compliance program management. |
Education
Work & Experience
Job Profile as a Customer Support Engineer: Providing support for Windows 2000, Windows NT 4.0 and Novell based enterprise network consisting of various domains. • Responsibilities include user/group administration, network security, network performance monitoring, troubleshooting network, and software as well as hardware problems. Major Company Clients had 4-5 main Servers and around 140 nodes running various desktop OS like NT Workstation, Win95/98, Windows2000 and Novell clients. • Providing technical assistance and escalation to other junior engineer’s residents at other centers
Conducting internal audits for ISO 27001:2013 / 9001:2015 • Assisted in implementation ISO / IEC 27001:2013 & ISO 9001:2015 Standards • Design and Deployment of an In-house Datacenter environment with multiple Servers facilitating multi-locations and interconnectivity. • Development / UAT / Production environment spread across multiple locations. • Security and Hardening of servers • DR – BCP for critical business applications. • Customized Messaging solutions [Integration of 3rd Party email with In-house Exchange spread across geographical location] • Deployment of hosting solutions for in-house as well as for customers. • Deployment of SharePoint for development as application usage. • Integration of VOIP implementation with EPABX for inter location calling. • Actively involved in cross-department function for Procurement / HR • Also involved in conducting internal Audits for ISO 9001 – 2008 standard for various departments (Development, Testing (QA,) Human Resource, Procurement). • Actively involved in building the IT Infrastructure as the company grew from a single location to multiple locations across the globe. • An active member of the Annet Green Committee where we are working on employees’ carbon footprint. Tree Plantation Program, Implementation of the GOGreen program. Professional Skill
Managing the team for providing end-to-end consultancy for design, implementation and audits for Cybersecurity / Information Security Management System (ISMS). Conducting Audits based on ISACA COBIT, ISO 27001:2013, CIS, NIST framework for various sectors like Banking, Insurance, Stock Exchange / Broking, etc. Implementation of ISO 27001:2013 / 9001:2015 controls and helping the clients for ISO certification in various sectors. Conducting CCA (Controller of Certifying Authorities) Audits for CA (Certifying Authorities) based on guidelines provided by CCA. • Conducting Cybersecurity Audits for various sectors like Stock Exchange, Banking, Insurance, etc. • Conducting of Third Party Vendor Risk Assessment and Compliance Audits. • Conducting Forensic audits for data recovery and compliance. • Conducting Internal and Business Process audits and for various clients in Banking, Manufacturing and Services Segment with involvement in all audit stages viz. Planning, Execution & Reporting. • Assessment of ITGC controls for various companies. • Conducted System / Cybersecurity Audits for different Stock Brokers for exchanges like NSE, BSE, MCX, MSEI, ICEX, INX and NCDEX. • Managing VAPT projects of clients.
