Ash Eishwarya Bhardwaj

• GRC (Governance, Risk, and Compliance) expert facilitating risk-based discussions and prioritizing decisions to create mitigation strategies to resolve identified vulnerabilities and apply security and privacy controls to reduce risk surface to acceptable level • Program manager driving optimization initiatives to enhance information security governance processes and conduct internal audits for continuous improvement and compliance with federal and regulatory requirements such as FFIEC, PCI-DSS, FedRamp, GDPR, CCPA • Performing cloud security assessments for new vendors and contract bound 3rd parties to assess their cloud security posture in terms of virtual and logical segregation of schema, hypervisor security, security controls for protection of data at rest, in motion, and storage, crypto key management, access controls requirements to maintain required Confidentiality, Integrity, and Availability • Performing Threat modeling and security design review as a part of vulnerability management and collaborating with red team and incident response team to identify exploitability factor to classify and prioritize the vulnerabilities based on risk score and create containment strategies • Creating and tracking security metrics, reporting noncompliance and other relevant material changes from information security perspective to facilitate management decision-making process by ensuring the senior leadership is aware of the potential security impact on the company’s goals and objectives