Highlights:Well versed with various security and compliance processes: SOX, ISO 270001, Worked extensively on Info. Sec Implementation, Change Control process, Portable storage Media compliance, I have worked extensively on Network security, IPS , Firewall, SIEM Devices and end point security. Well versed with system security, system hardening, patch management etc I have done the risk analysis and BCP /Disaster recover ( DR) set up for various organization.

Skills:Information Security Architect, Security Technology Architect, cyber security, Information security compliance privacy, ISO 27001 compliance

Goal:Looking for a Information security Architect position

Membership:ISACA, ISC2- Security Transdent Technogy

Certification:1. CISSP- Certified Information Security Professional 2. CISA - Certified Information System Auditor. 3. ITIL - IT Infrastructure Library

Honor:IBM BRAVO Awarad

Sr. Manager 03/2010 - current
SBI General Insurance Company, Mumbai, Maharashtra India
Industry: Insurance
I am responsible for rolling out the IT infrastructure, implementation and enforcement of information security policy in the organization. The major activities include:
• Responsible for defining the security parameters for systems and access control to network. • Low level design for IT infrastructure including high availability feature. • I have done Low level Design review of security devices that included firewalls, VPN, NIPS, HIPS, SIEM and security management system. • Implementation of ITIL process in the organization. • I have done vulnerability assessment for various applications and operating systems. • Analysis of risk and mitigation plan in the absence of a DR ( due in August 2011) • I am responsible for driving the DR for successful implementation.--
Assistant General Manager 01/2007 - 11/2007
Reliance communications Limited, Mumbai, Maharashtra United States
Industry: Telecommunications
Worked as aSecurity Architect: Implementation of Info. Sec policy and
Client Name: GE Money Complete server and systems security compliance management of GE Money set up in the Data Center, Including security audit for the systems. Client Name: Indiatimes Internet service Responsible the complete set up of IndiaTimes Internet Webhosting, mail gate way, anti-spam, using various multiple servers and storage set up in Reliance Data Center. The Set up consists of--
Infrastructure Manager 12/1997 - 03/2010
IBM India Pvt Limited, Mumbai, Maharashtra India
Industry: IT Services, Software
As part of various IT security regulatory compliance e.g. SOX, SAS-70, ISO 27001, PCI-DSS, worked closely with IBM Global Information Security team to implements controls at various levels to achieve compliance. This includes Info. Sec. implementation, VA / closure and patch management
Implemented change control process. Implemented change management process in the infrastructure operation. Data center operational improvement to provide highest level of availability by implementing IBM global standard process such as Known error DB, RCA. Implemented work instruction to meet high level operational performance to meet SLA and Tivoli Systems Monitoring Tools. Implementation of service activation / de-activation process I have implemented the process for SA & D process for IT infrastructure. The activities include: • System hardening, user id activation / de-activation process. • Back up and removal of data before de-activation. Effectively manages the incidents and problem management and resolution related to Server Systems Operation (various flavors high end UNIX servers- AIX on P series and HP-UX on Superdomes to support the critical application. Participate in the regular customer meet for RCA and corrective action. The back up operations systems was effectively managed to have 100% back up success to mitigate any type loss of Data and regular restoration testing to comply audit requirements.--
Principal systems Engineer 11/1994 - 01/2007
National Informatics Center, Ministry of IT, Republic of India, New Delhi, Delhi India
Industry: IT Services, Software
Designed and implmented various Network, Security and BCP/ DR set up for the organization.
Business Continuity and Disaster Recovery (From: March 2004 to December 2006) National Informatics Center provides the hosting facility of IT infrastructure in it’s data Center, for all ministries, department under federal government as well as state government and educational network. I have done the complete low level design (LLD), built up and made operational Disaster Recovery (DR) Center at Hyderabad, India. Post operation, quarterly DR testing was done for various application functionalities at the remote site. Sr. Systems Engineer Telecommunication and Network Security (From: March 2000 to: February 2003) Built and managed the largest VSAT NOC of India (managed over 600 Hughes Network System VSATs from NOC) The job role consists of configuration of implementation of Firewall rules, creation access list in the router, taking in to account of risk involved and Network Address Translation (NAT) / PAT setting for legitimate access to and from the Network to outside as well access from intranets. As overall team leader for Systems and Network administration of the servers and network set up, the activities involved Installation and management of various flavors of Unix Systems: SUN Solaris, Linux, for DNS / mail server set up and Sub systems configuration - My organization was having a CLASS-B public IP network from APNIC, and all the servers, desktop were assigned public IPs. To avoid security threat, such as network details being published in the internet as well direct access to host, I drove the project for conversion of all the internal IPs ( having public IPs) that were converted to Private Class-B segment using both static and dynamic NAT.--

Orissa Engineering College June 1986 - July 1991
Bhubaneswar, Orissa, India
Degree: Professional Degree
Major:Electronics & Telecommunications
I have done my B.Tech / B.E ( Electronics & Telecommunication)

Amitav Information security Management, Technology Risk Management, BCP / DR, Privacy
Amitav Information security Archtect, Security Technology Architect, Cyber Security, Information Security and compliance