Open To Work
KRISHNA SUMANTH
Information Security
Guntur
Work Preference
Summary
Experienced IT security engineer and Results-driven IT Security and Compliance professional with 7+ years of experience in ITGC, audits, and regulatory frameworks (ISO 27001, PCI DSS, SOX, HIPAA). Proven ability to resolve incidents, strengthen controls, and ensure compliance.
Overview
9
9
years of professional experience
3
3
Certifications
3
3
Languages
Work History
Technology Control Testing Analyst
Natwest
02.2024 - Current
- application controls across key domains including access management, change management, incident response, vulnerability scanning, penetration testing, and performance monitoring ensuring compliance with ISO 27001, SOX, GDPR, and PCI DSS.
- Evaluated audit evidence and system data to determine operational effectiveness of ITGC and ITAC controls, delivering independent assurance to senior leadership.
Assistant Manager
Deloitte
06.2022 - 01.2024
- engaged in telecom project focused on ITGC control testing
- Resolved findings from assessment team, engaging application stakeholders to deliver supporting evidence for findings.
- secured compliance of customer-facing applications with integrated risk management (IRM) big 26 guidelines
Specialist
HCL Technologies
08.2020 - 05.2022
- Enforce governance of organization's information security policy and standards across all business units and support functions based on ISO 27001 and other mandatory checks.
- overseeing information security project requirements gathering, coordination, creation, and maintenance of project plan, project documentation & effective knowledge transfer.
Senior Engineer
CSS CORP
06.2019 - 04.2020
- Performed documented audit activities in accordance with professional standards based on frameworks ( ISO 27001,PCIDSS,GDPR,HIPAA and SOC)
- Responsible for information security risk assessment,ensured vulnerabilities risks proactively identified , managed on continuous basis. Conducting Risk assessments, SOW / MSA reviews
Security Test Engineer
Enhops
05.2018 - 09.2018
- Managed information security risk programs, performed IT audits and risk assessments, and prepared audit report
- Qualys VAS scan report analysis. Monitored computer virus reports to determine when to update virus protection systems.
IT Security Auditor
Advantmed
06.2017 - 09.2017
- Maintained compliance for strong audit ratings; performed end-to-end audits and risk assessments across IT governance, cybersecurity, third-party risk, SDLC, and IT continuity.
Education
Bachelor of Technology - undefined
Jntu Kakinada
Kakinada01-2013
Intermediate - undefined
MPC
Guntur01-2009
Skills
Risk Management
ISO 27001,HIPAA,PCIDSS
SOC
McAfee
Finding Managment
Mortgage
Vulnerability Assessment
SOX control testing
Certification
ISO 27001:2013 Lead Implementor
Timeline
Technology Control Testing Analyst
Natwest
02.2024 - Current
Assistant Manager
Deloitte
06.2022 - 01.2024
Specialist
HCL Technologies
08.2020 - 05.2022
Senior Engineer
CSS CORP
06.2019 - 04.2020
Security Test Engineer
Enhops
05.2018 - 09.2018
IT Security Auditor
Advantmed
06.2017 - 09.2017
Bachelor of Technology - undefined
Jntu Kakinada
Intermediate - undefined
MPC