Apr 2018 – Present · 8 yrs 2 mos · Hyderabad, Telangana, India · Hybrid

• As a Tech Lead for Risk Management, I lead the Risk Assessments, Treatment, Mitigation, Closure and Re-Assessments for our vendors (1000+ Nos), evaluating IT general controls, and ensuring compliance with ISO 27001, PCI-DSS, HIPAA, and CSA CCM standards.
• Executed end-to-end IT Security Audits, including Risk Analysis, Control Testing and Reporting, improving Security Compliance across Cloud and On-premise environments.
• Performed Cloud Security Audits on AWS GCP Clouds, identified issues like public VMs, public buckets, dangling domains..etc. Raised risks for identified vulnerabilities and driven remediation till risk closure.
• Have worked as a Tech Lead managing activities like Patch Management, DR Testing, BCP Testing and Automation
• Performed audit on GIT using Checkov and presented the findings to the senior management.
• Developed and implemented security audit strategies for cloud environments (AWS, GCP) using CIS Controls and the CCM framework to enhance overall security posture.
• Presented findings on IT controls to senior management, recommending risk mitigation strategies and enhancing compliance efforts.
• Strengthened client relationships by delivering high-quality security assessments, risk mitigation strategies, and advisory services that aligned with business objectives.
• Conducted cybersecurity risk assessments using NIST SP 800-30 methodology, identifying high-risk vulnerabilities in AI, SaaS, and emerging technologies.
• .– Optimized the scope of Security assessment considering data capture, processes, data storage transmission of sensitive data and the systems connected to comply with PCI DSS V4.0.1
• Ensured policy documents are aligned with business objectives, implementable by the organization, and practical for compliance by ensuring purpose, scope, authority, and policy statements incorporate operational perspective and
• constraints.
• Performed audit on GIT using Checkov and presented the findings to the senior management.