Sai Kaarthik Poppoppu

Associate Consultant

Hyderabad, Telangana, India2 yrs 9 mos experience

Key Highlights

Expert in Cybersecurity Governance and Compliance.
Hands-on experience with ISO 27001 and TPRM.
Proven track record in risk assessments and audits.

Stackforce AI infers this person is a Cybersecurity professional specializing in Governance, Risk, and Compliance for enterprise environments.

Contact

Skills

Core Skills

Governance, Risk Management, And Compliance (grc)Iso 27001It Risk Assessment

Other Skills

GovernanceRisk ManagementCompliance (GRC)ITGCITACInternal AuditsThird Party Risk Management (TPRM)Identity and Access Management (IAM)BashCloud Security (AWS)SIEM & Incident ResponseNetwork SecurityLinuxShell ScriptingMicrosoft Office

About

Risk Advisory Consultant with 3 years of experience in Cybersecurity Governance, Risk, and Compliance (GRC), supporting organizations in identifying, assessing, and mitigating cyber and technology risks. Experienced in aligning security programs with business objectives and regulatory requirements. Hands-on end-to-end experience in ISO 27001, including risk assessment, Statment of Applicability, control implementation, internal audits, management reviews, and certification support. Strong experience in Third-Party Risk Management (TPRM) covering vendor risk assessments, due diligence, control evaluations, and remediation tracking. Skilled in risk assessments, control testing, and gap analyses across NIST CSF, SOC 2, and PCI DSS. Experienced in supporting internal and external audits, developing security policies and procedures, and stakeholder reporting.

Experience

Allvy

Risk advisory consultant

Mar 2025 – Present · 1 yr 1 mo · Hyderabad, Telangana, India · On-site

As a Risk Advisory Consultant, I perform Third-Party Risk Management (TPRM) assessments by evaluating vendor controls, identifying security and compliance gaps, and ensuring alignment with ISO 27001 and organizational risk frameworks. I contribute to risk evaluation, remediation tracking, and governance processes to strengthen vendor risk posture and support informed decision-making.

GovernanceRisk ManagementCompliance (GRC)ISO 27001Governance, Risk Management, and Compliance (GRC)

Codezye cyber

Consultant

Jun 2023 – Feb 2025 · 1 yr 8 mos · Banglore · On-site

Conducted ISO 27001 audits by assessing the design and effectiveness of information security controls across client environments. Reviewed policies, procedures, and control implementations against ISO 27001 requirements, identified gaps, and documented audit findings. Coordinated with client stakeholders to validate controls and supported remediation efforts to ensure compliance and strengthen the organization’s security posture.

IT Risk assessmentITGCISO 27001