Ravi A Email & Phone Number

Hyderabad, Telangana, India

- Transition new projects, review the security controls in the agreement and ensure the information security controls are enforced.- Participate in technology solution reviews and validate the effectiveness of technical controls deployment as per industry practices.- Perform risk management lifecycle for the transitioned projects. Monitor and optimize the effectiveness of the risk management processes. Ensure proper treatment of reported information security risks by reviewing risk mitigation plans, following up on risk mitigationactivities, and escalating non-mitigated risks- Perform internal audits as per TCS practices, validate the respectie domain controls and highlight the risks as part of documentation. - Perform third party information security audits.- Investigate the violations related to confidentiality and integrity as part of incident management process.- Participate in complete life cycle of ISO27001, PCI, HIPAA and SSAE18 audits and certification- Expertise in policy, procedures definition and deployment- Participate in developing and delivering awareness through training programs for the projects

Chennai, Tamil Nadu, India

- Responsible for the development, implementation, monitoring and compliance reporting of all Indian entities information security posture- Ensured that security standards and procedures are established and enforced- Enforced security training as part of the management program and ensure adherence- Periodic, regular monitoring and reporting of compliance to the set/redefined standard security policies and any entity specific security policies enforced on particular projects- Focused on prevention of security risks and issues and work closely with other managers and the associate community across multiple work locations to bring the organizations information security risks under explicit management control

Chennai, Tamil Nadu, India

- Managed information security initiatives.- Implemented and maintained ISO27001 certification related program (risk management and control testing)- Oversaw security incident management. Performed triage, investigation and corrective action and preventive action.-Reported on security systems and endpoint activity, monitor network traffic for anomaly and suspicious activity, interpret activity and propose recommendation.- Assist in development, maintenance and publish of information security procedures and guidelines, compliance monitoring procedures.- Assessed threats, vulnerabilities from emerging security issues.

Chennai, Tamil Nadu, India

- Mentored and trained colleagues in information security program.- Performed risk evaluation, reviewed design and program development, planned and performed in-house audits, reports- Managed process and acted in the lead role for computer security incident response team- Delivered process documentation, project improvement documentation- Addition/Modification of Netscreen rule base depending upon the various business requirements- Managed security administration of Juniper Netscreen firewalls- Managed security administration of Net cache & Web washer proxy devices- Managed security administration of Pointsec endpoint security encryption tool- Managed security administration of Tripwire file integrity tool- Quarterly entitlement review of Users/SUDO privileges/ group privileges on all SOX watch servers- Managed security administration of TrendMicro AV Enterprise Edition- Performed vulnerability assessment using ISS Scanner and mitigated the vulnerabilities with support from the local internal technology teams- Performed network discovery scans using NMAP for detecting network topology, address space, leaks and device fingerprints

Education record

Bachelor Of Commerce - Bcom, Business/Commerce, General