Nirup Paduchuru, Cissp, Cipp/Us Email & Phone Number

Dallas, Tx, Us

Purchase, Ny, Us

Purchase, Ny, Us

- Develop and oversee the Threat Management and Incident Management functions,- Develop and mature corporate security programs in the areas of Vulnerability Management, Incident Management, Threat Management, and Security Awareness. Work with IT stakeholders and managed service vendors on remediation planning.- Security Event Monitoring, SIEM lifecycle management. Lead the development,implementation, and tuning of monitoring use cases as needed upon emergence ofnew applications, threats, and policies.- Responsible for operationalizing incident response. Lead technical efforts during acritical incident- Establish key performance indicator (KPI) metrics, track and report on performance.provide reporting to senior management on operations performance.- Ensure Security Operations tools are effectively utilized and operating, identify gaps inprocess or procedure and implement new solutions accordingly.- Work with vendors to discover and secure partnering opportunities.

Fort Worth, Tx, Us

- Ensure compliance with California Consumer Privacy Act (CCPA)- Built data privacy program from the ground up. This involved creating a data catalog, performing compliance gap assessment, privacy risk assessment, structured and unstructured data discovery, privacy training etc.- Implement, maintain and enforce data security standards, processes and initiatives while protecting the confidentiality and integrity of Farmer Bros. information assets on multiple platforms.- Assist with documenting a secure configuration standard for managed file transfer and email.- Implemented Bring Your Own Device(BYOD) successfully.- Run external and internal vulnerability scans on network devices regularly.- Implemented patch management program. Work closely with server and desktop operations team to ensure systems are getting patched in a timely manner.- Created and implemented policies like data classification, patch management, vulnerability management, incident response, BYOD, information security program etc. in alignment with CIS and NIST frameworks.- Implemented Multi-Factor Authentication (MFA).- Run password audits frequently to look for weak and easily guessable passwords.- Assist with a developing and enforcing a DLP (Data Loss Prevention) policy on endpoints.- Manage web gateway to monitor traffic and email gateway to ensure sensitive information is not sent out via emails. Also, ensure users are protected from spam and phishing emails.- Implemented Carbon Black to prevent, investigate and remediate threats.- Manage Intrusion Prevention System (IPS) for deep-packet inspection to mitigate network attacks.- Created a security and awareness training program for all the new employees and this training is taken annually as part of the compliance training taken by all the employees.- Conduct phishing campaigns every month.

Houston, Texas, Us

- Ensured compliance with General Data Protection regulation (GDPR). Performed risk assessment along with data discovery, privacy training etc.- Implemented, maintained and enforced data security standards, processes and initiatives while protecting the confidentiality and integrity of Empyrean’s information assets on multiple platforms.- Ensured compliance with Health Insurance Portability and Accountability Act (HIPAA) and Service Organization Control (SOC).- Managed all PGP (“Pretty Good Privacy”) encryption configurations and generation of public/private keys.- Monitored and managed Empyrean’s Domain, SSO/SSL (Single Sign-On / Secure Sockets Layer) certificates- Ensured compliance with HIPAA, SOC1 and SOC2 audits.- Implemented two-factor authentication (2FA).- Ran external and internal vulnerability scans on network devices regularly.- Implemented patch management program. Work closely with server and desktop operations team to ensure systems are getting patched in a timely manner.- Created and implemented policies like data classification, data transmission, encryption, patch management, vulnerability management, incident response, information security program etc. in alignment with CIS, NIST and ISO frameworks.- Assisted with a developing and enforcing a DLP (Data Loss Prevention) policy on endpoints at Empyrean.- Managed web gateway to monitor traffic and email gateway to ensure sensitive information is not sent out via emails.- Managed Intrusion Prevention System (IPS) to mitigate network attacks.- Created a security and awareness training program for all the new employees and also this training is taken annually as part of the compliance training taken by all the employees.

Houston, Texas, Us

Ensured compliance of Halliburton’s information assets using Symantec Control Compliance Suite (CCS).Developed Patch Management Program.Threat and Vulnerability Management (Qualys, Nessus and WebInspect): Performed vulnerability scans on network devices and provide reports to appropriate support groups for remediation. Endpoint security.

London, England, Gb

Monitored multiple technologies using the ArcSight Security Information and Event Management (SIEM) tool to detect IT security incidents.TCP/UDP packet header and payload analysis to validate the operation and expected results.Experience rewriting Snort rules and verifying their correct operation.Experience with change management processes, procedures, and ticketing systems.

Houston, Texas, Us

Developed and implemented security standards and policies.Created a Threat and Vulnerability Management program manual.Monitored server remediation and patch management to ensure all vulnerabilities and deficiencies are resolved in a timely manner

Chicago, Il, Us

Regularly monitored and identified information assets for compliance with organizational security requirements.Analyzed Continental’s security posture using Symantec Security Information Manager (SSIM) to collect, store and analyze log data. Information Security policy and standards creation: Performed extensive research of ISO 27001, NIST 800 series, FIPS 140, Center for Internet Security standards and DoD security requirements to document and review security guidelines for Windows and SQL servers. Provided employees with security awareness training.

Houston, Tx, Us

Maintained the PeopleSoft database for University of Houston. In charge of SQL development. Identified required actions on database systems and generated weekly reports.

Ms, Project Management-Information Systems Security

Masters, Technology Project Management - Information Systems And Security

Bachelors Of Engineering (B.E, Information Technology

Education record