Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

SOUJANYA HB

Information & Cyber Security

Summary

Accomplished Information & Cyber Security professional with over 14 years of experience. Proven track record in incident response, risk management and regulatory compliance. Conducted regular security training exercises fostering a culture of security vigilance.

Overview

11
11
years of professional experience
6
6
Certifications

Work History

Senior Manager - Legal Regulatory & Mandatory -ICS

Standard Chartered Global Business Services
03.2022 - Current
  • Perform peer reviews of compliance documentation and processes to ensure regulatory adherence.
  • Review and test controls to identify weaknesses and recommend improvements.
  • Prepare and present the review report to higher management.
  • Collaborate with teams to address review findings and implement continuous improvements.
  • Maintain accurate records of peer reviews.
  • Reviewed and tested regulatory controls to ensure compliance with regulatory standards.
  • Identified areas of non-compliance and potential risks and communicated findings to stakeholders.

Manager- Legal Regulatory & Mandatory-ICS

Standard Chartered Global Business Services
06.2020 - 02.2022
  • Conduct detailed audits/assessments of information and cyber security related controls to ensure compliance with regulatory standards and best practices.
  • Reviewing the quality of responses and providing regular intervention to enhance the narration/ artifacts to meet the regulatory ask.
  • Identified areas of non-compliance and potential risks and communicated findings to stakeholders.

Sr Security Specialist-Information Risk Management

Cognizant Technology Solutions, CTS
07.2016 - 05.2020
  • Conducting comprehensive information risk assessment and management program focused on the identification, treatment and management of key business risks.
  • Collaborate with cross-functional teams to address issues, implement solutions and prevent recurrence.
  • Provide centralized support for all information security incidents and cyber investigations.
  • Providing 'consultative' support to management based on awareness of industry security.
  • Exception management for business.
  • Being part of certification audits and ensure compliance attestation by successfully delivering various Client/Third party assessments and audits, SSAE 18/ISAE 3402 Type I/II, ISO 27001, etc.
  • Review of contracts/security annexures.
  • Managing customer audits/visits by showcasing security and continuity best-practices at corporate, account and site levels.
  • Facilitate between various projects and accounts for overall implementation of the Client Security requirements as per the contract and respective security annexure(s).
  • Develop and manage performance metrics through tracking/reporting and active engagement with stakeholders for continuous service improvement.
  • Experience in designing and implementing an awareness program and/or employee training programs.
  • Active contribution in designing & documenting of security management plan as per client security requirements.

Security Specialist - Information Risk Management

Cognizant Technology Solutions, CTS
07.2013 - 06.2016
  • Exception management for business.
  • Being part of certification audits and ensure compliance attestation by successfully delivering various Client/Third party assessments and audits, SSAE 18/ISAE 3402 Type I/II, ISO 27001, etc.
  • Managing customer audits/visits by showcasing security and continuity best-practices at corporate, account and site levels.
  • Review of vulnerability assessment scan results and engage with relevant IT team and business units in order to resolve identified vulnerabilities within SLAs.
  • Validating and report on endpoint security compliance for the engagements.
  • Compile data and prepare IS reports for management.

Security Analyst -Intrusion Analysis Team

Cognizant Technology Solutions, CTS
4 2010 - 06.2013
  • 24*7 support on analyzing events that triggered in IDS and IPS sensors.
  • Monitoring Internet, DMZ and MPLS traffic
  • Managing and administering IDS Monitoring Application server, Network IDS Sensors, Host IDS servers and IPS appliances.
  • Monitoring health compliance of IDS sensors



Education

Bachelor of Engineering - Information Science

S.J.C. Institute of Technology
Chikballapur
04.2001 -

Skills

Flexible and able to learn quickly and apply knowledge accordingly

Good attention to detail

Stakeholder management

Team Collaboration

Willingness to take ownership and accountability of team work items and goals

Interpersonal Skills

Training & Mentoring

Certification

ISO 27001: 2013 Lead Auditor certified

Timeline

Senior Manager - Legal Regulatory & Mandatory -ICS

Standard Chartered Global Business Services
03.2022 - Current

Manager- Legal Regulatory & Mandatory-ICS

Standard Chartered Global Business Services
06.2020 - 02.2022

Sr Security Specialist-Information Risk Management

Cognizant Technology Solutions, CTS
07.2016 - 05.2020

Security Specialist - Information Risk Management

Cognizant Technology Solutions, CTS
07.2013 - 06.2016

Bachelor of Engineering - Information Science

S.J.C. Institute of Technology
04.2001 -

Security Analyst -Intrusion Analysis Team

Cognizant Technology Solutions, CTS
4 2010 - 06.2013
SOUJANYA HBInformation & Cyber Security