• Studied and applied ISO/IEC 27001 and ISO/IEC 27002 frameworks to build a strong foundation in information security governance, compliance, and data privacy. • Understanding the ISMS lifecycle, including control objectives and Annex A controls, and their implementation in real organizational environments. • Gaining hands-on exposure to risk management, security policies, and compliance requirements aligned with DPDP Act, PCI DSS, and NIST SP 800-53. • Reviewing network security configurations including routers, switches, and firewalls across platforms such as Cisco, Check Point, and Ruckus to identify misconfigurations and security gaps. • Worked with the data privacy team to analyze client data flows and create Data Flow Diagrams (DFDs) for better visibility and compliance alignment. • Audited client systems and devices integrated with SIEM solutions to validate logging, monitoring, and control effectiveness. • Collaborated with Red Team activities to understand attack surfaces, vulnerabilities, and their mapping to security controls. • Created implementation and tracking sheets for compliance frameworks such as TISAX and JAMA/JAPIA, aligning requirements with control evidence. • Documented Minutes of Meetings (MoMs) and mapped required evidence to specific controls, ensuring proper documentation and audit traceability.