Gandham Phani Srinivasan

Associate Director - Security and compliance officer

Security and Compliance responsibilities

• Lead information security governance functions including strategic planning and roadmap for evolution information security program, whilst governing DevOps teams ( SIEM, VA/VM Teams, Infra and application monitoring, Incident monitoring ) and Software Development teams.
• Maintaining a registry of regulatory requirements across the organization business units that need to be complied with in alignment to the organization's control framework.
• Managing all audit functions ( internal , external &Customer)
• Managing Privacy operations. ( DPIA, Data inventories, Product Privacy)
• Conducting Cloud Migration and Audits.
• Delivering security training and education to technical staff within findings and acts as internal security consultant to advise or influence business or technical partners

Product Security responsibilities:

• Identifying all relevant regulations for product and translate them into features.
• Influenced roadmaps for products, channels, programs and projects by assigning Security User Stories .
• Working closely with engineering teams, support product roadmaps/solutions and provide security support for wider core products.
• Define feature specs to clearly map out customer problems with feature requirement.
• Monitor progress of product/feature throughout development lifecycle, identifying risks and opportunities, keeping key stakeholders informed

Achievements

Streamlined processes :

Audit Function

DevOps Activities (Vulnerability Management, Incident management)

Risk Management

• Worked to align advanced technologies and Privacy by Design principles from the first stages of development and ensure that the data use meets established regulatory compliance needs.
• Collaborated with data product development teams creating new uses of data that employ privacy features.
• Analyzed, design and program software enhancements for new data streams with a goal of developing technical solutions and systems to help mitigate privacy vulnerabilities and prevent potential future privacy risks.
• Interfaced with usability team to ensure user-facing privacy controls are usable
• Used data anonymization, pseudonimization and encryption to develop systems that preserve and improve privacy protections.
• Guided the development of new privacy products and features.
• Drafted DPIA , Data Inventories, PDAM's, DPA .SCC.

Technical Lead and SME.

• Support pre-sales and post-sales teams in responding to customer risk and security and privacy assessments.
• Liaison with Salesforce customers addressing their security and compliance requirements and facilitating customer audits.
• Serving as Adviser on Security customer success Team, part my day-to-day operations focused on participating and managing Cybersecurity, IT Risk Management, and Regulatory Compliance

Product Security Responsibilities

• Interface with Product Management and Security teams to ensure all latest security features and capabilities are properly represented in customer responses
• Gather customer security/compliance requests, and liaison with Salesforce product managers to maintain security product roadmap
• Provide input and assist in developing compliance-related documentation: white papers, standard questionnaires, security best practices, etc.

Handled two different roles with in Deloitte.

Lead Solution Advisor TPRM ( Cyber risk and advisory, Multiple Projects)

TPRM Project :

• Defining third party risk management onboarding and offboarding process for clients on various types of TPRM methodologies.
• Creating and tailoring TPRM questionnaire based on clients requirements.( CSA CAIQ, SIG , ISO , NIST , GDPR , HIPAA)

Assistant Manager Privacy ( Global Talent office Deloitte)

• Provide advisory and consultative support to Business Process Owners (BPO’s) and Privacy Coordinators (PC’s) for data privacy related questions, activities and projects across Business Unit and their supporting technologies.

Microsoft Client

Tool/Application Assessment: Security, Privacy and Compliance: -

• Designed, implemented and conducted, tools and application assessments program for Microsoft CSS.

Controls Testing and Reviews

• Governed end to end delivery of internal Controls Testing and audit preparedness for various frameworks. ( ISO 27001 , 27018, NIST 800 171)

Client: ABB(through IBM) - Risk & Remediation Program

• Control monitoring and remediation
• Vulnerability Management

Assistant system admin February 2015 – October 2015

• ISO 27001:2013 , implementation (end to end) for IIIT information systems.
• Digitization of infrastructure with open source technologies.

Internship in Information security January 2013 - January 2015

Internship in information security under CISO.

• Network Vulnerability assessment and penetration testing.
• Open Source tools implementation.

Responsibilities :

SIEM monitoring

Network monitoring and Scanning ,

Incident management .