SARAVANAN E
Chennai
Summary
Information security analyst with experience putting security solutions in place and keeping them up to date to safeguard sensitive data. competent in detecting and reducing security risks, carrying out risk assessments, and putting security controls in place. Excellent analytical and problem-solving abilities that make it possible to create security measures that work. Capable of explaining technical knowledge to stakeholders who are not technical.
Overview
1
1
year of professional experience
1
1
Certification
Work History
Information security analyst
Information Security Governance Pvt. Ltd.
Chennai
04.2023 - Current
- The individual will assist in maintaining audit and compliance initiatives to ensure policies, standards, procedures, and audit activities are in alignment with business, IT, and regulatory requirements.
- Success in the role will be measured by the effectiveness of the implementation and operation of information security and compliance directives .
- The overall purpose of this role is to drive both information security and compliance initiatives.
- The individual will perform internal and external security compliance monitoring activities, manage client audits, IT control audits, and security risk assessments.
- This role will assist in the management compliance with industry best practice controls, regulations and frameworks such as NIST, PCI DSS , HIPAA, ISO27001 and internal policies and standards.
- Oversee information security compliance activities for ISO27001 compliance, including quarterly and/or annual security risk assessments.
- Establish and maintain security & controls policies and procedures in accordance with applicable regulations.
- Manage corrective action logs and ensure issues are assigned priority and closed out in a timely manner.
- Monitored security controls post authorization to ensure continuous compliance with the security requirements.
- Achieved and maintain the Compliance Score percentage (95% above) for India Region (30+ Sites, 200+ Clients).
- Assessed security control to ensure implementation of privacy and security rules in line with ISO 27001 standard.
- Developed new and or modified existing security controls, processes, policies and procedures in accordance with changes in laws or regulations.
- Monitored security controls post authorization to ensure continuous compliance with the security requirements.
- Have Coordinate with the multiple SME (BCM/Network/Server/Voice/CDC/Infosec/Infra VA/Asset/Digitization/ IT Service delivery/IT Procurement) for Security policies, Controls and gather the required evidence for Audit.
- Team of 4 members, to Co-ordinate with multiple SME'S for collecting the required artifacts as per timeline.
- Directly reporting to Assistant manager and assisting on multiple projects and audits.
- Working on the CR Controls and make sure that all the Contractual requirements are followed and submitting the evidence.
- Performed Site level risk assessment for multiple processes and tanking closure of the finding.
- Performed Rogue Wi-Fi scan/Network Segmentation for the Site.
Education
Msc-Cyber Forensics and Information Security -
Dr. MGR University Educational and Research Institute
Bsc-Computer Science -
DG.Vaishnav College
H.S.C -
Velammal Matriculation Higher Secondary School
S.S.L.C -
St.Joseph Matriculation School
Skills
- IT security compliance
- ISO 27001 & PCI DSS
- NIST & GDPR Frameworks
- MS Excel
Certification
- Certified AppSecPractitioner(CAP)
- ISO 27001:2022
Languages
English
Bilingual or Proficient (C2)
Telugu
Beginner (A1)
Tamil
Bilingual or Proficient (C2)
Tools And Technical Skills
- Wireshark
- Burpsuite
- FTK imager
- Recuva
Projects
- Hotel Reservation System: The online hotel reservation system will help the user to make reservation for hotel online. The user can check the availability of the rooms. It also takes input such as a number. Depending on the availability of the room the user can book the room. This would be ease for the customer to book the rooms.
- Multifactor authentication in shopping database: The customer can purchase the products in a safe manner by multifactor authentication i.e., by fingerprint image, OTP and automated generated keys.
Training
- Techo workshop series'22, techobyte solutions private limited, September 2022, IIT Madras
- Ethical Hacking & Cybercrime Investigation (EHCCI), January 9 - 13, 2023
Disclaimer
I hereby confirm that all the above furnished information is true to the best of my knowledge and belief.
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Quote
I have not failed. I’ve just found 10,000 ways that won’t work.
Thomas Edison
Timeline
Information security analyst
Information Security Governance Pvt. Ltd.
04.2023 - Current
Msc-Cyber Forensics and Information Security -
Dr. MGR University Educational and Research Institute
Bsc-Computer Science -
DG.Vaishnav College
H.S.C -
Velammal Matriculation Higher Secondary School
S.S.L.C -
St.Joseph Matriculation School