Goluguri Sruthilaya

Result-driven Information Security & Compliance professional with 3 years of experience in ISO/IEC 27001 implementation, SOC 2 audits, and supporting ISMS operations. Skilled in developing and maintaining ISMS policies, SOPs, and security documentation while coordinating internal assessments, gap analysis, and audit walkthroughs with external assessors. Demonstrated expertise in control mapping against ISO 27001:2022 Annex A and SOC 2 Trust Service Criteria, along with supporting GDPR and CSA STAR (CAIQ) related evidence activities. Strong analytical, documentation, and communication skills with a proactive, ownership-driven approach toward continuous compliance improvement and security awareness within consulting and corporate environments.

• Played a key role in maintaining ISO 27001:2022 ISMS operations, ensuring alignment of documentation, controls, and ongoing operational compliance.
• Supported SOC 2 audit preparation and evidence readiness, enabling efficient control walkthrough and observation remediation.
• Coordinated and supported internal and external audit exercises, ensuring timely responses, documentation availability, and corrective action tracking.
• Delivered and facilitated Security Awareness Training programs to promote secure behavior and compliance culture across users.
• Supported risk assessment and risk remediation workflows with accurate updates to the risk register and mitigation follow-ups.
• Assisted in reviewing and updating ISMS documentation, including policies, SOPs, and records required for surveillance audit readiness.
• Contributed to GDPR documentation and privacy compliance support tasks.
• Assisted in CSA STAR CAIQ-based control alignment and evidence collection.