Verizon

Distinguished Engineer

• Prepared Verizon managed security services platform for ISO 27001 certification making it available for sale ahead of schedule
• Identify, analyze, develop end-to-end risk assessment processes to mitigate business partner and third party risk (vendor risk management)
• Quantify risks based on scope and impact, create mitigation strategies, influence adoption and added them to risk register for monitoring 
• Analyzed systems, applications and project, operation risk and established security controls improvement initiatives resulting in $5 M upfront cost reduction 
• Lead cross-functional application and vendor reviews for technology, business process, Information security and regulatory risk collaborating with business, privacy and legal teams
• Evaluate cloud security posture, assessed risks  and designed controls to remediate audit deficiencies 
• Reporting status of key risk initiatives to management via dashboards
• Awarded two Spotlight Awards for contribution to a confidential project, and three Patent Awards

Principal Risk Management

Advisor and subject matter expert on technology, operational, financial, and/or information risks and control mechanisms to prevent fraud, abuse, strategic, reputational, and operational risks
Reviewed Gift Card and Credit Card projects for  Fraud, Credit and Payment Systems and suggested controls to mitigate / keep risk within acceptable limits for Bill To Cash.
Evaluated new products, processes and projects for fraud and credit risk, and suggested appropriate controls as needed.
Manage projects, provide requirements and testing support for Bill To Cash
Review and document root cause analysis of fraud issues. After analysis suggest mitigation. Monitor progress and report once issues are fixed.
Collaborate with Tax, IT Security, Legal and Compliance teams to ensure that risk is handled adequately for platforms, portals and infrastructure.

New Product Risk

Developed business requirements for new system and process implementations and enhancements that impacted data privacy, OFAC and other regulatory requirements
Collaborate with functional teams in developing business requirements and business controls in implementation plans
Drove process improvement and control implementation projects, while dealing with ambiguity
Developed documentation of processes, risks, and controls and worked with owners to assign accountability

Verizon Global Fraud Operations

• Lead the multiple audit planning, scoping, execution, and reporting based on identified risks for applications, systems and business processes
• Performed assessments and audits, suggested control improvements, documented technical issues to get multiple stakeholders to agree on recommendations  
• Audited against various frameworks, it audit and assurance standards like ISO 27001, SSAE 16, SSAE 18 SOC, CIS, NIST CSF, and others

Verizon Internal Audit

Rutgers University

• Lecturer for 400 level course in Information Security
• Rated 4.6 / 5.0 by students

Lecturer

Harman International

• Lead Foreign Corrupt Practices Act (FCPA) audits in Brazil and U.K. 
• Lead IT and integrated audits saving Harman International over twice our department budget for the year. 
• Evaluated purchase application and transactions, and detected double payments leading to the software vendor agreeing to return 1.5 million dollars during a Purchase Card audit.
• Prepared detailed documents, reports and observations supporting audit findings. 
• Design reports and data visualization dashboards for SOX audits.

Senior IT Auditor

Kershaw K. Khumbatta P.C

Associate

Open Information Systems Security Group

Vice President

Synerzy Software Solutions Inc.

Risk Assessment, Review and remediation of Systems and Processes.

Senior Consultant

Clayton Holdings Inc.

SOX IT Specialist

Prudential Financial and Management Services Ltd.

Managed engagements for IT Risk Assessments, Security Reviews, Pre- and Post-Implementation Reviews, Application Reviews  documentation and testing.

I am a risk management professional, leading system and process improvements with business owners to reduce risk. Guide business teams on Third-Party compliance and vendor assessment for risk mitigation to achieve business objectives. I anticipate bottlenecks and manage escalations. I use data to manage risk, quantify the impact, and translate risk metrics for business stakeholders. 
I help business owners execute cybersecurity strategies and accept risks appropriately based on quantified risk appetite.
With over 15 years of experience identifying, assessing, and driving remediation for information security professional risks in applications, I understand unique client challenges across multiple industries.
I am a sought-after resource to review risks in emerging tech like cloud security, blockchain, AWS security, and complex risk assessments.

Niloufer holds multiple certifications in IT Security (CISSP, CCSP), Risk (OPEN Fair), Privacy (CDPSE), Audit (CISA, CIA), and Fraud (CFE). She is a Certified Public Account licensed to practice in New Jersey. And a Chartered Global Management Accountant (CGMA).

Niloufer has authored two patents for System For And Method of Generating Visual Passwords (US 9,171,143 B2) and Establishing An Alternate Call Path Using Short-Range Wireless Technology (US 9,392,523).
Niloufer teaches part-time at Rutgers University, the state university of New Jersey, and is the organizer of the largest cybersecurity career MeetUp group and creator of the YouTube Channel "Cybersecurity Career Talks."

Niloufer co-founded two nonprofits Step Up Skill in 2020 and (ISC)2 New Jersey Chapter in 2012.

Niloufer Tamboly

PureHealth

Assistant Manger Cybersecurity

Air India Limited

•	Spearheaded the development and implementation of Information Security Governance frameworks, aligning them with organizational goals and regulatory requirements.
•	Ensured compliance with global standards such as ISO 27001, NIST and data privacy laws (GDPR, DPDP).
•	Led the development and review of key policies and procedures, including Incident, Change, Configuration Management, Network, and Human Resource Security Policies.
•	Developed and reviewed a Risk Management Framework, identifying, analyzing, mitigating, and monitoring risks, while maintaining a comprehensive IT Risk Register.
•	Deployed and optimized DLP, DSPM, and CASB solutions to enhance data security across the organization.
•	Monitored and ensured compliance with global data privacy regulations, including GDPR and DPDP, maintaining a strong data protection culture.
•	Facilitated external audit preparation and coordinated with stakeholders, leading audit remediation tracking meetings and providing guidance on corrective action plans.
•	Contributed to Air India's data privacy program by periodically reviewing and updating data privacy policies, procedures, notices, and forms.
•	Collaborated with cross-functional teams to ensure that security initiatives aligned with business objectives and compliance requirements.
•	Drove awareness and training programs to promote a security-first culture across the organization, improving overall security posture.

Staff Engineer

PwC India

•	Applied a thorough understanding of risk management frameworks including ISO 27001 and NIST, in the planning and execution of security initiatives.
•	Contributed to security design and implemented practical security measures using diverse security technologies and capabilities.
•	Conduct cybersecurity risk assessments- Evaluate client systems, networks, and applications to identify potential security risks and vulnerabilities.
•	Assess existing security controls and procedures, offering recommendations to enhance them for improved security resilience for client’s hybrid infrastructure.
•	Developed comprehensive Zero Trust Security Principles and best practices rooted in industry standards such as NIST 800-207 and CISA frameworks, fostering a culture of continuous improvement and resilience.
•	Liaise with internal and external auditors to coordinate compliance audits and address identified deficiencies in security controls and practices.

Cybersecurity Senior Associate

Wipro

•	Effectively led project teams in the execution of network and infrastructure Oversee policies, manage risk, and ensure compliance.
•	Led the planning and design of network and infrastructure projects, ensuring alignment. 
•	Conducted thorough feasibility studies and risk assessments to proactively identify and address potential challenges.
 •	Partner with team members and cross functional groups to ensure programs align with different compliance requirements (NIST, OWASP, GDPR, ISO 27001).
•	Evaluate IT Infrastructure in terms of risks to the organization and establish controls to mitigate loss, Determine and recommend improvements to enterprise risk management controls.
•	Conducting Business Impact Analysis (BIA) exercise to find the Criticality of services or application. 
•	Responsible for identifying outdated process controls and implementing corporate policy, procedures statements to reflect industry best practices.

Security Consultant

NTT DATA Services

• Oversee LAN and data center project management.
• Setting up and configuring firewalls from FortiGate, ASA, and Palo Alto while implementing rules and policies.
• Solid experience in designing and setting up secure cloud VPCs using subnets to connect private and public networks in AWS.
• Awareness of security alerts that include information about malware, phishing, denial of service attacks, and unauthorized access.
• Adhere to the ITIL process for change management and incident management in accordance with customer requirements.
• Successfully installed and configured network technologies, reducing unplanned downtime, increasing network reliability, and increasing overall network performance by 30%.

Networking Specialist

CoWrks

• Network Designing, Migration, Upgradation, and Implementation.
• Carrying out and configuring Cisco, HP, and Cisco switches and routers for enterprises and small offices.
• Implementation and configuration of FortiGate (NGFW), Palo Alto, Sophos (XG), Meraki, and Cisco ASA firewalls

Network Security Engineer

Bharti Airtel

• Hands on various devices.i.e. router and firewall.
• Handling escalation cases with vendors (Cisco-Nokia-Huawei).
• Configuring and Troubleshooting various issues of hardware or ios related.
• Works on various tools BMC Remedy,U2000,Nokia SAM,MetaSolv M6,Cisco Prime.
• Implemented new network technologies resulting in increased team efficiency by 25% and decreased average incident resolution time by 20%

Network Engineer

Educomp Solutions Ltd

• Configure, monitor, and maintain updated virus protection software, and backup data for emergency recovery.
• Offer users prompt technical assistance and collaborate with them to resolve any issues already in place.
• Administer and maintain system support for software, hardware, and servers.
• Troubleshoot, diagnose, and resolve all problems related to network and server.

Resident Engineer

I help organizations translate complex regulatory requirements into clear, actionable controls that reduce risk and improve compliance. With a foundation in IT support and hands-on experience in troubleshooting, documentation, and process improvement, I bring a unique perspective to the GRC (Governance, Risk, and Compliance) space.

I’ve contributed to audit readiness efforts, supported security policy implementation, and played a key role in aligning IT processes with compliance standards. Whether it's documenting procedures, collaborating with auditors, or ensuring systems meet internal and external requirements—I’m committed to strengthening organizational governance and risk posture.

Currently building expertise in ISO 27001, risk assessments, internal controls, and regulatory frameworks like NIST and GDPR. Passionate about leveraging my IT background to grow in a GRC-focused role.

Core Skills:
🔹 Risk Assessment & Mitigation
🔹 Policy Development
🔹 Compliance Readiness
🔹 ISO 27001 Implementation
🔹 Audit Support
🔹 Internal Controls
🔹 IT Process Documentation
🔹 Cross-Functional Collaboration

taplio

The Battle

Niloufer Tamboly

Pramod Bisht ,CISSP,CISM

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?