Arjun Subramani Email & Phone Number

Bengaluru, Ka, In

Bengaluru Area, India

· Help Project/Product Teams in tracking Product Security Improvement actions,· Facilitate Development process changes, Coding practices (Standard and Secure development),· Facilitate external Audits related to, ISO 27001 and ISO 9001 along with other best practices in the industry.Provide necessary trainings in Product secure development process/practices for SW development teams· Data analysis and presentation to teams and drive customer review actions· Develop and maintain Business continuity and Disaster recovery plans at BU levels and perform testing at regular intervals.

Karnataka, India

SABIC (Mar'19 – Aug'20)Role: Architect – Enterprise Security· Research, Plan and Design robust security architectures for any IT demand.· Perform risk assessments and treatment based on SABSA framework.· Lead information gathering discussions and identify security requirements for various IT demands and initiatives.· Involve in IT project lifecycle from very beginning of project and provide required security input at right time to ensure security requirements are identified, managed, and delivered in proactive fashion.· Prepare security Strategy, Plan and Design for requested business need.· Liaise with Risk Management team to ensure Business and Domain risks are identified, assessed and controls are identified.· Identify and define Control and Enablement Objectives to deliver required level of risk management for each domain.· Guide security controls design to ensure all policies and information security requirements are met, to enable business request.· Define and maintain domain security policies and procedures· Develop content for improving IT Security Management Framework based on SABSA methodology.· Define performance metrics for various security service delivery teams.Saudi Telecom Company ( Aug'20 – Aug'21) Role: Cyber Security Resilience Specialist· Manage cyber resilience framework, including activities, Plans, resources· Align CS Cyber Resilience requirements with STC business continuity teams to provide resilience against cyber disruption and minimize impact to STC in event of cyber-incident· Assess cyber scenarios to target evaluation to ensure up to date Cyber Resilience Plans· Test STC cyber readiness for identified cyber risks and update cybersecurity teams/ BC/DR to take needed corrective actions to elevate level of STC cyber resiliency· Collaborate with STC business owners to assess & identify business impact related to target environments; and agree on actions to ensure CIA.

Bengaluru Area, India

Governance, Risk and Compliance: ☑ Coordinate and perform regular security related audits for IT environment for the organization globally.☑ Conduct periodic risk assessments in accordance with ISMS/PCI Standards to identify control weakness and to assess their impact on Herbalife information security.☑ Interface with internal and external audit groups as well as risk management teams.☑ Perform the audit and assessments of the information security / CyberSecurity policy and procedures being implemented and monitor their compliance, including appropriate technical and administrative controls being-maintained.☑ Manage corporate Risk Register and coordinate remediation items for security risk management requirements.☑ Schedule and conduct third party reviews for critical vendors and coordinate with GSS team for remediation.☑ Contribute to the development of process documentation, consistent practices, process maturity and improvement in all IS areas including Application Development, Infrastructure, Operations and Management.☑ Consult different stakeholders for creation and implementation of new policies, establishing new reporting cycles.☑ Develop and maintain Information Security Policies, Standards, Guidelines and Operating Procedures.☑ Prepare and publish security dashboards for various key performance indicators and operational metrics.☑ Review of MSA’s and vendor contracts.PCI: DSS☑ Ensure PCI-DSS compliance for Herbalife Americas and closely monitor the compliance on regular basis.☑ Conduct PCI-DSS compliance reviews for in-scope applications and infrastructure. Secondary point of contact for external auditor (QSA), internal teams for certification audits

Bengaluru Area, India

Job Description:ISMS☑ Conducting information security risk assessment.☑ Performing assigned SDD (service delivery document) reviews and supporting the account in implementing the same.☑ Conduct client requirement audits.☑ Managing improvements to ISMS☑ Conducting site readiness audits prior to audits☑ Conducting and collection of information security metrics.☑ Developing procedures & related documentation required for ISMS implementation.☑ Contributing to ISO27001:2013 initiatives.☑ Conduct and coordinating internal audits☑ Managing improvements to ISMSVCM (VMware vRealize Configuration Manager):☑ Initial set up and creation of baseline policy compliance checks in VCM☑ Scheduling of policy compliance reporting☑ Updating policy checks as and when required (e.g. to correct a check if not reporting properly or if a client policy change requires checks to be updated).☑ Generating ad-hoc reports for HPE compliance team where required to check particular compliance areas☑ Basic trouble-shooting in VCM in case compliance checks are not delivering expected output.☑ Provide specific details regarding what specific checks are reporting against on the operating system as and when requested.☑ Scheduling calls thrice a week to give an update on the VCM capabilities.Governance and Compliance:☑ As a part of client GRC team, worked on various capabilities w.r.t compliance.☑ Capabilities include Windows, Unix, Database, Backups, Antivirus and Patching etc.,☑ Sending out evidence requests to the delivery teams and collecting relevant evidences to prepare monthly and quarterly compliance reports☑ Preparing final compliance and metrics reports once after receiving all the relevant evidences.☑ Coordinating client internal audits.

Bengaluru Area, India

 Managing improvements to ISMS  Contributing to obtaining ISO27001 certification of Management System.  Providing expertise and support to IS initiatives.  Understanding the existing practices/ process followed in the organization and implementation of ISMS in-line with ISO 27001 controls.  Implementing Information Security policy & required controls.  Developing procedures & related documentation required for ISMS implementation.  Conducting GAP Analysis & Risk Assessments.  Finding improvement to ISMS policies, processes through IS Forums and review meetings.  Reviewing various assessments results, Risk Treatment Plans (RTP), Management review process and Internal Audit process. Conducting surprise ISMS audits at various locations. Client requirement audits Review of MSA’s and Contracts. Asset Management Incident Management Software licensing and Compliance Management

1. Risk Assessment and Risk Management2. Frame and review of ISO 27001 policies and procedures3. Monthly Reviews on ISO 27001 controls4. Internal audits5. Face External and Surveillance audits.6. Surprise audits.7. Business Continuity Planning and Execution.8. Enterprise Risk Management9. Software Licensing10. Corporate Compliance Management11. Compliance reviews and audits12. Incident Management13. Asset Management14. Review of MSA's and Contracts15. Client requirement audits.

Bengaluru, Karnataka, India

* Job Description remains the same as the JD at Infinite Computer Solutions

Bengaluru, Karnataka, India

1. Customer Service support2. Database support3. Sales support4. Data Entry 5. Technical Support

Bachelor'S Degree, Computer Programming, Specific Applications

Education record