Rashmi Iyer

Operations Associate

Bengaluru, Karnataka, India20 yrs 7 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Risk Management and Compliance frameworks.
Proven track record in DevSecOps and Business Continuity Management.
Strong leadership in establishing security frameworks and policies.

Stackforce AI infers this person is a Cyber Security and Risk Management expert with extensive experience in DevSecOps and compliance frameworks.

Contact

Skills

Core Skills

Risk ManagementComplianceDevsecopsInformation SecurityBusiness Continuity ManagementConfiguration Management

Other Skills

.NETAI toolsAgile MethodologiesAuditsAutomationBuild ManagementCC#ChefClearCaseContinuous IntegrationDevOpsDisaster RecoveryElastic Stack (ELK)GRC tools

About

A passionate and driven Global Program Manager and Cyber Security Lead at NXP. My core competencies include Risk & Compliance, Supply Chain Security and DevSecOps. I am committed to delivering innovative and secure solutions that meet the needs and expectations of our customers and stakeholders. I bring diverse perspectives and experiences to the team, as I have worked across different functions, geographies, and cultures. In my current role, I am responsible for establishing and maintaining a new supply chain security framework, as well as conducting audits and risk assessments for various solutions in the organization. I work on streamlining Risk Management and leveraging AI capabilities to accentuate Security processes. Expertise in establishing Business Resilience Programs at an enterprise.

Experience

20 yrs 7 mos

Total Experience

5 yrs 1 mo

Average Tenure

10 yrs 6 mos

Current Experience

Nxp semiconductors

3 roles

Sr. Manager Risk and Compliance

Apr 2022 – Present · 4 yrs 2 mos

● Addressing Risk, Compliance & Audits across the enterprise.
● Author and owner of multiple enterprise policies based on ISMS, NIST and Zero Trust.
● Overseeing execution and quality of Business Impact Assessment using the Enterprise Risk Matrix for applications across the enterprise.
● Drive risk assessments of solutions to identify security NFRs and their delivery.
● Providing Risk Treatment plan and Mitigations. Performing security controls exception.
● Administration of GRC tools.
● Security Assessment of SaaS solutions and other Cloud Applications.
● Facilitated Internal and External Security Audits. E.g. ISO27001, SoC2, IATF16949.
● Using AI tools to automate Customer Audit Questionnaire.
● Strategized and Implemented Ransomware Preparedness at the enterprise level.
● Managing the Third-Party Risk Management for NXP Semiconductors. Established a techno-functional framework for evaluating vendor products for security risks.
● Leading enterprise-wide efforts for IT-BCM activities, not limited to BC-DR Drills, Table-Top Exercises, supporting teams with planning and execution of drills; with specialization in executing assessments for manufacturing units.
● Program Manager for driving Audits of NXP from both internal, external and customer Audits.

GovernanceRisk ManagementComplianceAuditsRisk AssessmentGRC tools+2

Business Information Security Officer (GRC & BCM)

Promoted

Jan 2021 – Present · 5 yrs 5 mos

Sr. TECHNICAL LEAD

Dec 2015 – Jan 2021 · 5 yrs 1 mo

Software Release Management and DevSecOps for Mobile Division.

DevSecOpsSoftware Release Management

Siemens technology services

DevSecOps Lead & Information Security Consultant

Nov 2009 – Nov 2015 · 6 yrs · Bangalore

Lead a team of five for DevSecOps activities.
→ Successfully Implementation of Continuous Integration using Jenkins for all projects in the Division.
→ Mentoring team members in various processes and policies.
→ Setup various Reporting and Monitoring tools e.g., NCover for Code Coverage, Zabbix for Monitoring, Bugzilla for defect tracking.
→ Achieved 50% Performance Improvement by Automating and running Parallel executions of Compilations, Unit Test and Smoke Test.
● InfoSec Advisor and internal auditor for ISO27001 in the business unit.
→ Authored ISO27K based policies for the organization.
→ Strategized the process for identification of Critical CIs.
● Schedule and drive security evaluations of applications.
→ Weekly vulnerability analysis based on Nessus scan and fixing them. Overseeing of Security Patches.
→ Manual and automated penetration testing of applications.
● Authored and Implemented BCDR Plan for Business Unit.
● As a part of InfoSec - Change Control Board negotiated terms and policies best suited for the Organization and at the same time achieved the requirement of Information Security.

DevSecOpsContinuous IntegrationSecurity EvaluationsISO27001Information Security

Philips

Sr. Systems Engineer

Sep 2008 – Oct 2009 · 1 yr 1 mo · Bangalore

Configuration Manager in Philips Healthcare
Automation of various housekeeping activities
Created a Build Dashboard which not only displayed results but also the ETA and other reports.
Smooth Migration of Source Control Servers.

Configuration ManagementAutomationBuild Management