Venkata Pavan Kumar Email & Phone Number

• Over 20+ years of extensive IT & Information Security experience in conducting management system audits for Information Security Quality and cloud management systems, IT Risk management, WebApplication & Database security assessments, VAPT and design, development, implementation of information systems utilizing various quality tools (Lean & 6sigma) • Experience in conducting Certification and Survelliance audits for management system of ISO 27001, ISO 9001, ISO 27017, ISO 27018 and ISO 27701 covering Information Technology, Manfacturing, Engineering, construction industries. • Expert in Designing, Developing and implementation of standard product of audit services for the certification Bodies.• Experience in performing Audits across the globe eg: USA, Australia, Singapore, Taiwan, South Africa etc.• Experience in end to end Third party risk assessment, including scoping, engaging, onsite / offshore assessment, reporting and closure.• Experience in preparing the control framework covering the multiple standard, regulatory, compliance and framework requireents such as PCI DSS, NIST 800-53, COBIT, CSA Cloud etc.• Experience in developing risk management strategies, Peforming risk Assessments, Risk mitigations and Risk management end to end for organizations including people, process and technology.• Experience in program management tasks for Third-party Vendor Risk assessment Program, including resource allocation, SLA monitoring and tracking, monthly invoicing, etc.• Handled multiple customer engagements with particular focus on IT risk assessment, compliance and application security.• Trained to perform TISAX assessments.• Trainer for TISAX foundation course.• Performed SOX, ISO 27001 audit preparedness tasks including TOD, TOE, RFT of IT general controls• Managed end-to-end Risk Management activities including Risk Assessments, Internal control reviews, Risk Monitoring and Reporting activities• Perform technical risk assessment of web applications and Databases using automated tools like NGS, AppSentry and Web Inspect for various clients during various engagements• Perform risk assessment of applications and identifying the mitigation controls for the risks. • Creating risk assessment report along with the mitigation controls for identified security vulnerabilities.• Qualitative experience of handling, managing & delivering multiple development projects to suit the clients’ requirements.• Planning and scheduling project activities; overseeing the execution & delivery of project deliverables.

• 

  Mphil Computer Science