Pruthvi L J

Associate Partner

Bengaluru, Karnataka, India11 yrs 4 mos experience

AI Enabled

Key Highlights

Over 11 years of experience in IT compliance and security.
Expertise in PCI DSS and ISO 27001 compliance.
Proven track record in leading risk-based IT audits.

Stackforce AI infers this person is a Fintech compliance and risk management expert with extensive experience in regulatory audits.

Contact

Skills

Core Skills

Regulatory ComplianceIt AuditRisk ManagementCompliance ManagementIt SecurityProject ManagementCompliance ConsultingIdentity And Access ManagementSecurity Management

Other Skills

AI SecurityAccess Control ManagementArtificial IntelligenceAudit ReportsAuditingBusiness StrategyCommunicationConsultingCorporate SecurityCybersecurityEnterprise Risk ManagementFintech ComplianceISO 27001ISO 27001 Lead AuditorIT Application Controls

About

As Associate Director - Internal Audit at Cashfree Payments, I bring over 11 years of experience in information security and IT compliance. My work emphasizes IT General Controls (ITGC), IT Application Controls (ITAC), and adherence to RBI regulations, ensuring robust regulatory compliance and risk management. With expertise in PCI DSS, ISO 27001, and IT governance, I lead risk-based IT audits to enhance operational efficiency and compliance. By collaborating with cross-functional teams, I help build a culture of compliance and risk awareness while aligning audit strategies with industry regulations and company objectives.

Experience

Cashfree payments

Associate Director - Internal Audit (IT GRC)

Jun 2024 – Present · 1 yr 9 mos · Bengaluru, Karnataka, India

Audit Planning: Develop and implement a risk-based IT audit plan aligned with Cashfree’s objectives and payment industry risks.
Conduct Audits: Lead independent IT audits, assessing controls and compliance with RBI regulations and internal policies.
Reporting: Prepare clear IT audit reports with actionable recommendations for senior management and Board.
Compliance Oversight: Ensure adherence to IT General Controls (ITGC) and IT Application Controls (ITAC) under RBI guidelines.
Stakeholder Engagement: Collaborate with cross-functional teams to promote a culture of compliance and risk awareness.
Regulatory Updates: Monitor industry regulations and adjust audit plans accordingly to maintain compliance.
Team Management : Manage external audit staff and foster a collaborative team environment.
Risk Assessment: Evaluate emerging technologies and risks in the payment sector to safeguard digital assets

IT General ControlsIT Application ControlsPCI DSSISO 27001Regulatory ComplianceRisk Management+4

Navi

Information Technology Auditor

May 2023 – Jun 2024 · 1 yr 1 mo · Bengaluru, Karnataka, India · On-site

Developed and executed risk-based annual IT audit plans across Navì Group entities, aligning with organizational goals and emerging risk areas.
Conducted IT audits independently or in collaboration with external auditors, assessing controls, operational efficiencies, and compliance with policies and regulations across Navì Group entities.
Provided clear and concise IT audit reports with actionable recommendations for senior management within Navì Group.
Coordinated IT General Controls (ITGC) and IT Application Controls (ITAC) audits for Navì Group, ensuring compliance with industry standards and regulatory requirements set by RBI, SEBI, and IRDAI.
Established collaborative relationships across Navì Group entities and actively contributed to key business decisions.
Stayed abreast of industry standards and regulatory requirements set by RBI, SEBI, and IRDAI, updating audit plan accordingly to address the needs of Navì Group

Risk AssessmentLeadershipAccess Control ManagementProblem SolvingInformation SecurityCommunication+8

Slice

2 roles

Associate Director - Compliance (IT GRC)

Promoted

Dec 2022 – Apr 2023 · 4 mos · Bengaluru, Karnataka, India

building and leading the compliance team
Manage PCI DSS Implementation and Certification (Level 1 and SAQ-D).
Handle external Auditors (PCI QSA, ITGC Auditors, Third party/Partner Auditors)
Be the focal point for all IT and Information Security regulations applicable to the company.
Remediate audit gaps by coordinating with all the teams.
ISO 27001 Implementation.
SAR DL audits and TPAP/PPI audits execution
RBI and NPCI Guideline/regulations Implementation.

Regulatory ComplianceFintech ComplianceThird Party VendorsIT Security AssessmentsAccess Control ManagementProblem Solving+13

Compliance Manager (IT GRC)

Nov 2020 – Dec 2022 · 2 yrs 1 mo · Bengaluru, Karnataka, India

Regulatory ComplianceThird Party VendorsIT Security AssessmentsAccess Control ManagementProblem SolvingCommunication+12

Infobip

Presales security engineer and Audit Co-Ordinator

Aug 2019 – Nov 2020 · 1 yr 3 mos · Bengaluru, Karnataka, India

To know technical aspects of Infobip’s products and solutions.
To have an excellent overview of the business and are up-to-date with the latest industry trends as well as the competition.
To understand client’s business, knowing exactly which of our products can help them evolve their business.
To act as a go-to person in presales team for security-related assignments such as security questionnaires and helping the team in the RFP process.
To constantly align with Corporate Security and Privacy office and Legal department.
To ensure that all projects are delivered on-time, within scope and within budget.
To develop project scopes and objectives, involving all relevant stakeholders and ensuring technical feasibility.
To have good understanding of the Security/network infrastructure within Infobip and specific to region.
To have clear knowledge of the technical security and compliance issues within the company.
To conduct internal audit reviews for ISO 27001 certification.
To be Regional point of contact for the global CISO.

Third Party VendorsIT Security AssessmentsAccess Control ManagementProblem SolvingCommunicationCorporate Security+9

Sisa information security

3 roles

Consultant - Risk and compliance

Promoted

Apr 2018 – Aug 2019 · 1 yr 4 mos

Roles and Responsibilities:
PCI-DSS implementation for Banks, ODCs, BPOs
PCI DSS Consultation
Information Security Consulting
Risk Assessment
Information Security Awareness Training
CPISI Training

Third Party VendorsIT Security AssessmentsAccess Control ManagementCommunicationProject PlansThird Party Risk Management+6

Senior Associate Consultant

Promoted

Apr 2017 – Mar 2018 · 11 mos

Third Party VendorsIT Security AssessmentsAccess Control ManagementCommunicationProject PlansThird Party Risk Management+5

Associate Consultant

Jul 2016 – Apr 2017 · 9 mos

Worked in the Risk and Compliance team for performing PCI DSS compliance audits.
Possess strong knowledge on compliance standards like PCI DSS, PA DSS and ISO 27001.
Conducted gap assessment audit and risk assessments for leading payment gateways, E-commerce and M-commerce merchants, issuing service providers, telecom service providers, pre-paid card management for banks.
Conducted vulnerability assessments for organizations with different payment card environments.
Conducting Web Application Penetration Testing (both Manual as well as Automated)
Exposure in security assessments of Mobile applications (Android/iPhone/ Blackberry etc).
Relevant knowledge of conducting Vulnerability assessments and Penetration Testing of Network and Servers.
Hands-on experience of Penetration Testing tools such as Metasploit, Kali Linux distribution tools
Ability to take complete ownership of the project.
Good verbal and written communication
Innovative mind and go get attitude

Third Party VendorsIT Security AssessmentsAccess Control ManagementCommunicationProject PlansThird Party Risk Management+5

Ibm

IT Security Analyst - IAM Specialist

Sep 2014 – Jul 2016 · 1 yr 10 mos · Bengaluru Area, India

Perform Identity and access management activities.
Have working knowledge of individual IDs, Generic IDs, Shared IDs, Privilege IDs.
Have knowledge of password management, password expiry, basic minimum password guidelines.
Execute and track security process related activities including User ID management.
Coordinate & track the completion of scheduled IAM related activities
Support peers and team leaders to achieve UID related SLA of IAM processes

Access Control ManagementCommunicationAuditingIdentity and Access ManagementSecurity Management