Harshitha Reddy Vanga Email & Phone Number

Irving, Tx, Us

Southlake, Texas, United States

• Lead cybersecurity initiatives by Collaborating with cross-functional teams and stakeholders to identify program goals, define work problems, and prioritize deliverables, ensuring alignment with organizational objectives.• Manage endpoint security, including VPNs, USB blocking, and malware detection with Forti EMS, boosting protection by 50%.• Perform third-party risk assessments for vendors, applying due diligence to mitigate risks and ensure compliance.• Drive execution of risk and compliance activities, including statutory risk assessments, regulatory requests, and audits, focusing on designing and testing controls and safeguards to meet global regulatory requirements.• Develop and monitor risk and compliance-related infrastructure, including operating models, risk registers, transparency report guidelines, and control frameworks, ensuring adherence to regulatory and compliance standards.• Identify, communicate, and mitigate risks to keep projects on track, taking corrective actions for critical deviations and ensuring timely completion of deliverables.• Monitored 10,000+ monthly security events with SolarWinds SEM, enhancing threat detection capabilities.• Coordinate audits with external QSAs and internal stakeholders, streamlining evidence collection and assessment processes• Implemented over 15 security controls for HITRUST e1 and to secure business operations and maintain compliance.• Implemented a comprehensive identity lifecycle management framework, reducing user onboarding time by 30% and ensuring 100% compliance with CIS, HIPAA, PCI-DSS, NIST-CSF across 5 azure b2c tenants• Maintained and communicated key program metrics, and defining mitigation plans to ensure project success.• Implemented user federation in LastPass with Microsoft Entra ID, reducing administrative overhead by 73%.• Deployed MFA with YubiKeys and Cisco Duo across 63+ servers, reducing unauthorized access incidents by over 40%

Spearheaded a 40% improvement in threat detection through advanced SIEM and SOAR configurations, aligning with SOX compliance requirements.• Identify Security Events and Incidents in real-time through centralized monitoring using SIEM tools apply containment and Eradication strategies and follow up with recovery and tabletop exercises.• Managed compliance checks of GDPR, SOX, HIPAA, ISO 27002and PCI-DSS using Microsoft Defender,demonstrating proficiency in compliance tools.• Utilized Azure Sentinel and Microsoft XDR for End Point, O365, Email, and applications security.• Identified, prioritized, and implemented various cybersecurity initiatives with NIST CSF as a baseline,contributing to the overall security posture of the organization.• Monitored and analyzed threat intelligence sources (OSINT) to guide detection strategies, successfullyidentifying and mitigating potential threats.• Developed detection logic for attacker tactics, techniques, and procedures, enhancing system security and response capabilities.• Engaged in continuous learning and development, staying abreast of emerging trends and solutions incybersecurity.• Utilized SQL Query tools for Data analysis and shared the results with respective teams for decision-making.• Leveraged Wireshark for deep packet analysis to monitor network traffic and identify suspicious activities, and utilized Nmap for network inventory, managing service upgrade schedules, and monitoring host or service uptime.• Conducted Nessus scans, mitigating 15 high-risk vulnerabilities per scan, resulting in a 48% reduction in threats.• Managed detection and response processes using advanced technologies, ensuring compliance with SLAs and security standards.• Performed Data classification based on sensitivity and aligned security controls to protect integrity.• Authored 100+ pages of Standard Operating Procedures (SOPs) for IT Risk Management, Incident handling playbooks, procedures and policies.

Lees Summit, Missouri, United States

• Demonstrated proficiency in greeting visitors, securely handling sensitive communications, and meticulously managing inventory.• Assisted in setting up and configuring video conferencing systems for remote meetings.• Attained knowledge of Cybersecurity frameworks HIPAA, PCI-DSS, FedRAMP, and CSA STAR• Provide first-level technical support to end-users, addressing hardware, software, and connectivity issues.• Strong communication and interpersonal skills to effectively assist and educate non-technical users.

Hyderabad, Telangana, India

• Played a key role in mitigating risk and ensuring user access compliance with regulatory requirements, such as SOX. Optimized controls and business processes, which led to a significant improvement in overall governance by 64%. • Successfully integrated Splunk SIEM tool with Onapsis for enhanced vulnerability analysis. Scheduled jobs and alarms within this integrated system to proactively manage vulnerabilities. • Provided expert guidance for SOD Resolutions and design of SAP security strategy according to customer requirements and SAP best practices. • Reviewed CVE and CVSS scores, developed disaster recovery plans, and gained knowledge in Incident Management and Cybersecurity Frameworks. • Built and maintained collaborative relationships with IT SOX Stakeholders and Internal Audit teams. This involved fixing Authorization Vulnerabilities using Onapsis, resulting in a risk reduction of 43%. • Documented and performed root cause analysis after addressing each vulnerability, ensuring lessons were learned and best practices were developed for future reference. • Created and presented comprehensive reports, documents, and presentations on vulnerabilities and audit findings to stakeholders with strong analytical skills. This involved calculating and communicating key metrics (KPIs) related to security and compliance. • Ensured that all security changes were appropriately documented, tested, reviewed, and implemented within agreed change control windows, maintaining the integrity of the system security.

• Ensured GDPR compliance by instituting stringent data security protocols and leading successful audit engagements.• Bolstered Code security across all ECC systems by leveraging ABAP with code profiler for secure code alterations.• Eliminated 63% of system vulnerabilities via Virtual Forge, significantly strengthening security and compliance.• Oversaw secure user provisioning and role management within R3 Architectures and HANA Database environments.• Orchestrated comprehensive audit preparations, reviewing access controls, user accounts, and administrative logs to uphold regulatory standards.• Executed detailed SOD Risk analyses and preemptive simulations, effectively mitigating potential security threats.

Hyderabad, Telangana, India

• Prioritized and efficiently resolved critical issues for end-users and cross-functional teams, enhancing system reliability and user satisfaction.• Architecture and managed SAP security roles, including Single, Composite, Master, and Derived roles, ensuring secure and appropriate access using the principle of least privilege in user provisioning.• Expertly diagnosed and resolved complex authorization and authentication issues, contributing to continuous system integrity and user productivity.• Delivered consistent on-call support during critical monthly patch updates and system upgrades, bolstering system defenses and operational continuity.• Spearheaded collaborative client engagements to fortify partnerships and align SAP security measures with client-specific requirements.

Virtual

1. Creating awareness about internshala internships and encouraging new students to join the platform. 2. Motivating students to go for online trainings and helping them to upskill themselves.3. Organizing seminar to help students to find their dream internship and participating in social media campaigns.

Hyderabad, Telangana, India

• Developed full-stack Java applications for a Banking website Implementing secure user authentication and authorization mechanisms.

Master'S Degree, Cyber Security And Information Assurance

Activities and Societies: Student worker Threat Intelligence in malicious and benign websites May 2023-June 2023 •Analyzed 100k entries.

Bachelor Of Technology - Btech, Computer Science

Activities and Societies: NSS volunteer Awarded with First Price for Paper Presentation on Virtual Classes