Souzan Asadollahi

I am responsible for security compliance topic, security certificate, security control implementation,....

- Work to conduct internal audits and build a program that incorporates global regulatory standards. - Security Risk Assessment of cloud providers and other IT providers. - Suggest remediation efforts to address non-compliance, and verify that implementation meets requirements. - Implementation of the Information Management System that will support global growth based on NIST and ISO standards.

Responsible for the delivery of IT audits to ensure business risks were recognized and appropriately managed before the company was adversely affected. Activities included auditing operating systems, applications, infrastructure, policies and procedures to identify missing controls in order to be aligned with best practices and standards , thereby facilitating an overall system and product improvement with good market acceptability across various projects and raising customer satisfaction.

- Performing alert correlation , analyzing and interpreting security events across the enterprise to optimize the incident response. - Being responsible for tracking incidents related to security monitoring includes Log , Event Management System and Activity Monitoring.

Reviewing, Managing and recertifying all accesses on OS, databases and applications - Implementing role-based access management across the organization and updating the access management database. - Facilitating security awareness for all employees in terms of compliance requirements and based on their respective role related to information security.

Cryptography - Project Management - Information Security Management - Network Security - Computer Forensic - Architecture Security,...