Sai Ravi Kuchimanchi

Overall 9+ years of implementation of Information security and auditing experience in ISO 27001 (Information Security Management Systems) – 2013 & 2022 NIST SP 800-82 (Operational Technology Security) BS 10012 (GDPR) Implementation SSAE 16 (SOC II Type 2 Assessment) ISO 31000:2009 (Risk Management) HIPAA Experience in Handling security related client Questionnaire's Conducting Third party risk assessment through OneTrust Data Privacy Impact assessment Preparation of Procedure, Policies and Guidelines for IT Data Inventory and Data Flow Diagrams Access Management Incident Management Patch Management Analysis Certified ISO 27k Lead Auditor with more than five-hundred-person hours of conducting Information security audits. Process Consulting for 20+ projects, Administration, HR - Tag and IT department.

• Certified Information Systems Auditor (CISA) from ISACA
• Certified ISO 27001:2022 Lead Auditor from Certification Partner Global (CPG)
• Certified ISO 27001:2013 Lead Auditor from IRCA/CQI
• Certified PCI DSS from BSI
• Certified ISO 31000 Risk Manager from PECB
• Certified ITIL V3 and ITSM Foundation from Exin
• Certified Internal auditor for Cigniti through BIA program

• Sept 2021 – Till date with Solenis GSS Hyderabad as Principal Specialist – Governance, Risk and Compliance
• Key Result Areas
• Working as Digital Security Analyst: Primarily responsible for Information Security Assessments, Operation Technology Assessments, Security Audits, Security trainings, and IS Compliance requirements in Solenis.
• Duties:
• Gained valuable experience in handling major external assessments.
• CyberVadis
• EcoVadis
• Swift Assessment
• Aon Assessment
• Platinum CTO Assessments
• PWC Audits
• Coordinator for ISO 27001 external audit and SOC 2 Type 1 assessments.
• Conducted OT cybersecurity assessments in accordance with NIST SP 800-82r3 for over twenty sites.
• Created an OT cybersecurity policy document with the assistance of the IT & OT security team.
• Created a TPRM process (Templates, Risks, Assessment flow, and Conditions) in OneTrust.
• Conducted third party risk management assessments with existing Vendors/On boarding vendors through OneTrust tool.
• Manage cookie consent process in OneTrust.
• Delivered risk management and privacy trainings across all the employees globally.
• Worked and effectively finished the external security assessment questionnaire that clients/customers provided within the allotted time.
• Performing Information security gaps assessment for support functions (IT, HR, Admin, Finance &Marketing).
• Developing new IT-related documents and improving existing ones in compliance with ISO 27K standard.
• Conducting Data privacy impact assessment (DPIA) through OneTrust for all PII applicable projects and vendors.
• Managing GRC tool for risk tracking and closure of audit findings.
• Prepare and provide the CISO with analytical reports on the tasks completed on a weekly and monthly basis.
• Create security awareness trainings to all employees and contractors.
• Initiated cloud security assessment activity in OneTrust tool.
• Managed Claroty - threat detection tool for OT.