RIMSHA ZAFAR
About Candidate
MS in Cyber law and Information security, with experience in Information Security Audit, ISO 27001:2013 Implementation, RiskAssessment, SOC1 Audit and Scoping.
Education
68%
86%
84%
9.2- CGPA
Work & Experience
Working with the Audit and Compliance Services Team under the IT Platform Services. Worked under the project of SOC1 Audit in the Quarter 3. Also worked in the UK-DC Follow Up Audit Process. Currently involved in the NA- Audit and in the Quarter 4 scoping process. Assisting the audit team as per there project requirements. Working with several auditors from Eny, Delloitte and Grand Thorton. Share point and dashboard work. Sending of the weekly reports and part of formulating the risk register presented to the management. Served the organization during the winter internship and got a pre-placement offer from them.
The main work was on the ISO 27001:2013 document which was implemented in the firm. Our team was asked to review the document and point out for the important features and key changes which were necessary for its improvement. We also helped them to understand IT ACT,2000 and gave a lecture to all the officials present
The internship focused on privacy and data protection. The 30 days internship provided study and research of the projects of election commission related to M.P. State I.T. Centre and how the enactment of AADHAR Act helped and what are the flaws in it. Working with the IT department and helping them in the process of how technology and law can be merged together. Also, closely worked with the App that was started to help the voters in registering them and how it will be beneficial during the election time.
In this 15 days internship our focus was on the analysis of the tool being used by them and the advantages of it. It further focused on teaching us how this methodology of online checking of papers is more convenient than pen and paper technique. The team guided us on how reports are generated and how they focused on the output of the report to build their strategies. Even I was a part of their drives to one of the college where public speaking and confidence enrichment was taught to the students.
Assisting team in cybercrime and IT fraud cases. E-mail and investigation cases. Digital forensics and investigation.
