ANIL KISHORE REDDY
Hyderabad
Summary
Dynamic compliance leader with extensive experience in driving SOX, SOC 1, and SOC 2 compliance at E2open across various subsidiaries. Specialized in ISO 27001 implementation and vendor risk management, facilitating effective cross-functional collaboration. Demonstrated success in achieving regulatory compliance while enhancing information security frameworks to ensure business continuity and mitigate risks.
Overview
19
19
years of professional experience
Work History
Associate Director – Compliance
E2open
Hyderabad
01.2020 - Current
- Driving SOC 1 planning, design, and testing
- Head APAC compliance team and ensure compliance with SOC 2, SOC 2, NIST, GDPR, US, UK, EU and China Privacy Laws
- Played key role in acquisitions and onboarding them to the corporate policies
- Leading the Business continuity team across the Globe
- Compliance SPOC for 6 different subsidiaries of E2open
- Accountable for Vendor risk management and Client risk assessments teams
- Overseeing internal audits for 6 different subsidiaries
- Driving the 6 members team across APAC and Europe
- Onboarded 4 subsidiary companies to SSAE 18 and ISO 27001 standards
- Played Key role in SOX certification for 6 different subsidiaries
Associate Process Manager
Columbus Global
Hyderabad
05.2019 - 12.2019
- Implementation and maintenance of Information Security Management System (ISMS) compliant with ISO 27001:2013
- Monitor and implement the information security function in accordance with the established policies and procedures
- Identifying information security goals that meet business requirements and checking whether the ISMS is properly integrated into the organizations processes
- Plan and conduct periodic security audits
- Identify and assess the impact of information security threats, vulnerabilities risks and assess business security risks with a view to recommend security controls that will enable the Business to manage those risks effectively
- Analyze awareness needs and plan activities including awareness sessions/campaigns across the organization Analysis & report General and Technical Metrics
- Ensure completion of assigned audits and documentation of work papers on time
- Executing tasks related to GDPR compliance GDPR compliance related reporting
- Implemented ISO 27001 and ISAE 3402 from the scratch across global location and got them certified
- Played Key role in GDPR Implementation
- Managed all global locations alone
Associate Process Manager
Broadridge Financial Solutions
Hyderabad
09.2015 - 04.2019
- Leading the team for ISMS and QMS documentation, awareness and implementation; adhering to SSAE 16 & SOX Compliances
- Conducting internal audit programs and internal audits; appearing for ISO 27001, ISO 9001, Client & Corporate audits
- Participating in Risk Management, Business Continuity and Disaster Recovery; coordinating with Technology Team to ensure compliance with the IS policies
- Assessing the risk & compiling the results for management review
- Managing the on-boarding of acquired companies and new projects as per ISMS and QMS scope
- Steering operations with Client Risk Management and Vendor Risk Management teams in India
- Reviewing and ensuring adherence to compliance while facing the client audits
Analyst L3: Information Security
Cyient Ltd.
Hyderabad
07.2013 - 08.2015
- Drove ISMS documentation, awareness & implementation; migrated framework from ISO 27001:2005 to ISO 27001:2013
- Organize Information Awareness Trainings; planned and conducted Internal Audits
- Offered answer to the questionnaire, reviewed the pre-audit reviews; adhered to the compliance across all departments for client’s security audits
- Led ISO 27001:2013 Certification audits; compiled data for security policies, standards, procedures and guidelines
- Assessed IS Risk & controls selection activities for all support functions and delivery groups
- Participated in Contingency Planning, Business Continuity Management and IT Disaster Recovery in-line with relevant functions and third parties
Vendor Risk Specialist
Cognizant Global Services Pvt. Ltd.
Hyderabad
08.2010 - 07.2013
- Led operations as primary contact across customer base for implementation of vendor risk management program
- Performing Vendor Risk Assessments to allot rating and evaluated risk associated on a schedule basis
- Documented information for vendor database and addressed vendor and vendor risk manager queries
- Updated vendor assessment& status to the specific business units
- Assessed periodical security frequently and built secured environment
- Suggested Security Solutions, served as a subject matter expert by providing recommendations from security perspective to technology solutions being maintained by partners
- Offered recommendation and controls to ensure the appropriate level of protection and adherence to the goals of the overall information security strategy
Senior Desktop Engineer
Primaccess Technologies
Hyderabad
03.2008 - 08.2010
- Company Overview: franchisee of Wipro InfoTech
- Franchisee of Wipro InfoTech
Hardware and Network Engineer
NIIT@K12
Hyderabad
06.2006 - 02.2008
Education
MBA - Systems
Gandhi Institute of Technology and Management University
Visakhapatnam01.2017
B.Com. -
Manonmaniam Sundaranar University
Tamil Nadu01.2012
Skills
- Information Security Compliance
- Information Risk Assessment
- Budgeting & Cost Control
- SOX internal testing
- SOC 1 and SOC 2 testing
- ISMS Framework Implementation
- ISO 27001 Compliance
- ITGC control testing
- Disaster Recovery Management
- Business Continuity Planning
- Incident Management
- Client/IT & IS Audits
- Vendor Management
- MIS Reports/Documentation
- Regulatory compliance
Certification
- Certified Information Systems Auditor (CISA)
- Lead Auditor for ISO 27001:2013
- Lead Implementer for ISO 22301
- Information Technology Infrastructure Library (ITIL) V3 Foundation
Languages
- English
- Hindi
- Telugu
Personal Information
Date of Birth: 04/23/84
Languages
Telugu
First Language
English
Proficient (C2)
C2
Hindi
Proficient (C2)
C2
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Work Preference
Work Type
Full TimeWork Location
On-SiteRemoteHybridTimeline
Associate Director – Compliance
E2open
01.2020 - Current
Associate Process Manager
Columbus Global
05.2019 - 12.2019
Associate Process Manager
Broadridge Financial Solutions
09.2015 - 04.2019
Analyst L3: Information Security
Cyient Ltd.
07.2013 - 08.2015
Vendor Risk Specialist
Cognizant Global Services Pvt. Ltd.
08.2010 - 07.2013
Senior Desktop Engineer
Primaccess Technologies
03.2008 - 08.2010
Hardware and Network Engineer
NIIT@K12
06.2006 - 02.2008
MBA - Systems
Gandhi Institute of Technology and Management University
B.Com. -
Manonmaniam Sundaranar University
Similar Profiles
Krishna MoturiKrishna Moturi
IT End User Service Manager at E2openIT End User Service Manager at E2open
Hari Prasad Bhasker VHari Prasad Bhasker V
Senior Solution Architect at E2OpenSenior Solution Architect at E2Open
Navya DupatiNavya Dupati
Project Coordinator | Enterprise Solutions Lead at E2openProject Coordinator | Enterprise Solutions Lead at E2open