NAGAVENI M. S
Cybersecurity Professional
Bangalore,KA
Summary
Over 14 years of experience in IT Industry handling Cyber Security and Information Security and Compliance function, seeking assignments in Information Security Management & to ensure secure Information processing environment
Pursuing full-time role that presents professional challenges and leverages interpersonal skills, effective time management, and problem-solving expertise.
Overview
14
14
years of professional experience
6
6
Certifications
3
3
Languages
Work History
Expert- Cyber Security
Schneider Electric private Limited
02.2024 - Current
- Take ownership of the end-to-end review process and engage with all stakeholders as needed.
- Involve Privacy reviewer from the beginning of the Certification process.
- Review all controls and their applicability in a harmonized manner and in accordance with our SOP.
- Ensure an evidence-based review when applicable.
- Manage Re-certification focusing on adding value by enabling the controls necessary and ensuring Privacy Reviewer / DRL engagement
- Deliver high quality gap assessments including context, description of gap, risk consequences, and recommendations to mitigate. Work on a risk library for harmonization and conduct workshops to train the team.
- Take proactive action for all expired Certifications.
- Following are the cyber and privacy control (in collob) we used to assess: remediate vulnerability, Manage Internal Identity, Manage external identity, WAF(Web application firewall),Review third party, DRP, Encryption, Secure privilege account, Protect personal data
SME - SECURITY & DELIVERY SPECIALIST
Wipro India Pvt Ltd
08.2022 - 01.2024
- Vulnerability Management: Working with partners (Wipro & ATOS) in remediation of open Vulnerabilities And to meet KPI
- Exception Management: Working with partners in remediation of expired exceptions and keep track of Valid, also ensure to meet KPI
- Legacy servers: Work with required stakeholders in server decom process for Legacy systems. Created reports, presentations, and other documentation for stakeholders.
- Identified opportunities for process improvements across the organization.
SME – Security & Delivery Specialist
Kyndryl Solutions Pvt Ltd
06.2020 - 08.2022
- October 2020 IBM announced its intention to separate the IT Infrastructure Services unit of its Global Technology Services division into a new, separate public company, creating two industry leading companies – IBM and Kyndryl. Kyndryl will design, run and manage modern, efficient and reliable technology infrastructure that the world depends on every day.
- User Access Management (UAM) process within kyndryl cyber security organization.
- Responsible for building and deploying effective IAM technologies, solution and process.
- UAM access provisioning, de-provisioning at AD level.
- Collaborate with other IAM Team to ensure compliance.
- Main audit focal for customer (KPMG ) and other quarterly audits.
- UAM Primary focal to respond to day in day out queries and solution seeker.
- Worked with cross functional Team to resolve high end escalation seamlessly and willing to take up challenges
- Prior large scale IAM implementation/integration experience including user provisioning.
- Hands on experience at server level – os400, Mainframes, Windows, Unix, Linux.
- Hands on Cognos – Audit report prep and presentation.
- Faced major customer Audits (KPMG).
- Strong written and verbal communication skills.
- Tools worked on : Cognos, ISIM, Service Now
Senior Analyst – Data and Cyber Security
Societe General Pvt Ltd
05.2015 - 04.2020
- Responsible for the Information Security, Data Privacy, Risk & Compliance of the organization.
- Information security exception handling to ensure compliance through Service Now (Impulse ticketing tool).
- Ensure Company’s alignment to Information security policies and procedures.
- Challenge and identify gaps in handling Standard operating procedures.
- Reporting Information security incidents.
- Participate in Enterprise Audit Program.
- Lead and participate in re-organization activities
- Participation in BCP (Business Continuity Plan) activities
- Societe Generale French multinational investment bank and financial services company headquarters in Paris, France.It supports French networks,InternationalRetail Banking, Financial services, Corporate and investment banking.
Analyst – Information Security
Capgemini India Pvt Ltd
02.2014 - 04.2015
- Ensure organization is compliant to Information and data security aligned to ISO 27001:2013 standards.
- Ensure company’s alignment to Information security policies and procedure.
- Conduct internal audits ensuring organization’s compliance towards Information Security Management System.
- Ensure customer information security requirements and policies are in place.
- Ensure organization’s BCP is in place.
- Endorsed for conducting security awareness trainings across organization.
- Ensure risks are identified and mitigated at both organization and customer ends through Enterprise Risk Management framework.
- Conduct Risk Assessment and Risk Management aligned to ISMS standard.
- Frame and review of ISMS Policies and Procedures.
- Monthly reviews across departments on ISO 27001 controls.
- Conduct client requirement audits.
- Capgemini is a French multinational corporation headquartered at Paris, France. It provides IT services and is one of the world’s largest consulting, outsourcing and professional services company with more than 130,000 employees in over 44 countries. Services include Business Process Management, Business Process Outsourcing, Mobile services, Cloud services.
Engineer – Enterprise Risk and Compliance (ERC)
SLK Software Services
08.2011 - 02.2014
- Ensure organization is compliant to Information and data security aligned to ISO 27001:2005 standards.
- Ensure company’s alignment to Information security policies and procedure.
- Conduct internal audits ensuring organization’s compliance towards Information Security Management System.
- Ensure proper functioning of the IT services (ITIS) through surprise IT audits.
- Ensure customer information security requirements and policies are in place.
- Ensure organization’s BCP is in place.
- Endorsed for conducting security awareness trainings across organization.
- Ensure risks are identified and mitigated at both organization and customer ends through Enterprise Risk Management framework.
- Conduct Risk Assessment and Risk Management aligned to ISMS standard.
- Frame and review of ISMS Policies and Procedures.
- Monthly reviews across departments on ISO 27001 controls.
- Conduct Desktop and Software licensing audits.
- Conduct client requirement audits.
- Handling Incident management, Change management, Exception Handling and Compliance activity.
- SLK Software Services is an offshore development company, established in 2000, specializing in providing a range of IT solutions and services that leverage cutting-edge technologies and industry best practices, which deliver significant savings to the customers. With a distinct approach towards creating business value, the 1500+ professional team, a part of the 5000+ people SLK Group, is big enough to scale and small enough for personalized attention and solutions.
Education
Bachelor of Engineering -
Siddaganga Institute Of Technology
Tumkur01.2011
Skills
CyberSecurity and Privacy Application Security Assessements
Information Systems Audit Planning, Execution and Reporting
Information Security Risk assessment
Formulation and Implementation of Information Security Policies & Procedures
Review of Business Continuity
Perform integrated audits & reviews of business systems used to support key operations /processes
Best Practices based auditing and reviews – ISO/IEC 27001
Conduct of ISMS Inductions and Trainings
Incident management, Change management, Exception handling, User identity and access Management
Comprehensive problem solving abilities
Excellent verbal and written communication skills
Willingness to learn, a team facilitator and a hard worker
Ready to accept challenges and ownership
Certification
Certified Lead auditor Information Security from BSI.
DECLARATION
I hereby declare that all the above-mentioned information is true to the best of my knowledge.
Date: Jan 2026
Place: Bangalore (Nagaveni.M.S)
Timeline
Expert- Cyber Security
Schneider Electric private Limited
02.2024 - Current
SME - SECURITY & DELIVERY SPECIALIST
Wipro India Pvt Ltd
08.2022 - 01.2024
SME – Security & Delivery Specialist
Kyndryl Solutions Pvt Ltd
06.2020 - 08.2022
Senior Analyst – Data and Cyber Security
Societe General Pvt Ltd
05.2015 - 04.2020
Analyst – Information Security
Capgemini India Pvt Ltd
02.2014 - 04.2015
Engineer – Enterprise Risk and Compliance (ERC)
SLK Software Services
08.2011 - 02.2014
Bachelor of Engineering -
Siddaganga Institute Of Technology