Agilandeswari natarajan

• Established and led a specialized team to implement security controls and compliance programs safeguarding sensitive financial data.
• Managed and coordinated internal and external audits for ISO 9001 (Quality Management System) and ISO/IEC 27001 (Information Security Management System), ensuring organizational compliance with applicable standards and requirements.
• Planned and supported audit activities, including audit scheduling, preparation of documentation, evidence collection, stakeholder coordination, and closure of audit findings.
• Performed delivery audits to evaluate adherence of IT processes and controls to defined governance standards.
• Executed Management Control Testing (MCT) to assess design and operating effectiveness of controls.
• Developed risk-based metrics and dashboards highlighting control gaps, exception trends, and overall risk posture.
• Conducted application testing using SYS IDs, ensuring control coverage aligned to risk ratings and frameworks.
• Prepared executive-level summaries providing insights into testing progress, risk trends, and program health.
• Jul 2023 – Present

• Led security compliance initiatives for client Kuoni Tumlare (KT), strengthening governance and security across global tourism operations (airlines, holidays, cruise lines, hotels).
• Implemented GDPR on KT projects, serving as Data Protection Officer (DPO).
• Ensured adherence to ISO 27001:2013 standards, achieving compliance with regulatory and client requirements.
• Managed vulnerability assessments using Qualys reports and coordinated patch management.
• Conducted policy reviews and presented regular security dashboards to clients.

• Established a centre of excellence for Internal Audit practice in Chennai.
• Owned QMS for the organization, managing Software Quality Assurance and ISMS.
• Conducted PCI DSS assessments, GDPR compliance audits, and surprise QMS/ISMS audits.
• Delivered training sessions on QMS, ISMS, and GDPR.
• Presented Management Review Meetings (MRM) to the CEO and prepared dashboards with project health indicators.
• Drove Business Continuity and Disaster Recovery strategies.

• Led internal and external audit planning, execution, and process improvement initiatives.
• Implemented enterprise-wide Risk Management framework (ISO 31000).
• Conducted startup, integrated, delivery, and closure audits.

Analyzed data for continual improvement, corrective actions, and root cause analysis

• Designed and operationalized IT General Controls and Application Controls.
• Managed risk profiles, control assessments, and assurance testing programs.
• Conducted internal and external audits, facilitated process reviews, and delivered training.
• Supported continual improvement initiatives through corrective and preventive actions.

Assisted in IT audits and governance processes, gaining foundational experience in risk and compliance.