Swathi K. Email & Phone Number

Springdale, Ar, Us

Strategic Leadership: Develop and implement comprehensive GRC and data security strategies that align with the company’s business goals and regulatory requirements.Risk Management: Identify, assess, and prioritize organizational risks, including data security risks; design and implement effective risk mitigation strategies.Regulatory Compliance: Ensure compliance with all relevant laws, regulations, and internal policies, including data protection regulations such as GDPR and CCPA.Data Security: Oversee the development and implementation of data security policies and procedures to protect the organization’s data assets from internal and external threats.Policy Development: Create, review, and update GRC and data security policies and procedures to reflect changes in regulations and industry best practices.Training and Awareness: Develop and deliver GRC and data security training programs to employees at all levels to enhance awareness and understanding of compliance, risk management, and data protection.Reporting and Documentation: Prepare and present regular reports on GRC and data security activities, including risk assessments, compliance audits, and incident investigations, to senior management and the board of directors.Incident Management: Lead investigations into compliance violations, data breaches, and other security incidents; develop corrective action plans and oversee their implementation.Collaboration: Work closely with departments such as Legal, IT, HR, and Internal Audit to ensure a coordinated approach to GRC and data security.Stakeholder Engagement: Liaise with regulators, auditors, and other external stakeholders to address GRC and data security matters and ensure transparency.

Mooresville, Nc, Us

Presents Domain security fundamentals and technical specifications to small development teams for assigned projects on Supply chain, Digital Analytics & Computational Intelligence (DACI) , Marketing, Digital etc areas.Assists in system and software architecture and design of different applications to ensure that assets are always appropriately secure.Assists the Development teams /Product team by helping them build their security expertise and develop an operational model specific to Lowe’s.Ensures that all logging and monitoring concerns are well understood and implemented according to regulations.Determines security protocols by evaluating business strategies and requirements.

Mooresville, Nc, Us

Served as the Technical escalation point of contact for the Pen test assessment related to various application across the enterprise.Analyze the System and software architecture design of the application and execute the strategy to exploit the application to ensure that assets are always appropriately secured.Provided Information Security advice and guidance to project teams and help them to engineer the applications in a secure way.Coordinating with development teams to provide mitigation recommendations, education, and ensuring vulnerabilities are effectively fixedManages and/or performs risk assessments and penetration tests. Works cross-functionally to manage and organize work processes and ensure the most efficient workflowRecommends changes in process, Lowe’s policies, and standards as they relate to the architecture and design principles.Improved data management and software development processes as well as collaborated in the SDLC workflow to identify and remediate OWASP Top Ten vulnerabilitiesLeads collaboration with technical teams to identify, resolve, and mitigate information security pen test findings.

Rahway, New Jersey, Us

Noida, Uttar Pradesh, In

Bachelor'S Degree (B.E), Computer Science And Engineering

Master'S In Cyber Security And Information Assurance, Cyber Security And Information Assurance