Open To Work
Sri Ganesh Kudikala
Hyderabad,TG
Work Preference
Summary
A detail-oriented IT Governance and Compliance professional with 2.5 years of experience in ITGC, ITAC, SOX, ISO 27001, SOC 1 & SOC 2, and control testing across diverse environments. I aim to contribute to a progressive organisation by applying strong skills in risk assessment, compliance monitoring, and audit readiness. Recently certified as an ISO/IEC 27001:2022 Lead Auditor, I bring enhanced expertise in ISMS frameworks, regulatory requirements, and audit execution.
Overview
3
3
years of professional experience
1
1
Certification
Work History
IT Analyst
Trends Infonet Solution Pvt Ltd
Bangalore
12.2023 - Current
- Worked on GRC activities.
- Working experience on vendor risk assessments through Archer.
- Validate the responses in Archer & follow up for evidence and remediation.
- Experience in defining IT General Controls, creating & updating policies.
- Experience in co-coordinating with business and IT across all phases of ISMS.
- Experience in performing gap analysis based on NIST 800-53.
- Expertise Change management compliance & Cab requirements.
- Expertise in client interaction, interacting with all levels of management.
- Well-versed with the latest trends and techniques in the field, having an inborn quantitative aptitude & determined to carve a successful and satisfying career in the IT industry.
- Ability to work independently or as part of a team and to balance multiple projects and conflicting priorities.
- A systematic, organised, hardworking, and dedicated team player, confident in handling multiple assignments under pressure and meeting tight deadlines.
- Ability and interest in mastering new and emerging technologies.
- Role: Technology Analyst
- IT Projects handled: Vendor Risk Management; ITGC, SOX, and Internal Controls review.
- Responsibilities: Defining IT General Controls, Testing IT General Controls.
- Risk Identification, Risk Assessment, Risk Mitigation Solution.
- IT Application Audit, IT internal Audit, Audit Report.
- Quality Auditor in Identity and Access Management, where we audit all the processes and implementations under Access provisioning.
- Responsible for coordinating and working with different stakeholders for Special project compliance on SOX and Compliance perspective.
- PCI DSS, NIST GAP analysis.
- Risks are documented, classified, and addressed with appropriate action.
- Prepare executive management and Audit Committee materials highlighting overall SOX progress and results.
- Active participation in driving awareness of Information security-related issues and risks.
Education
BSc - Computer Science
Kakatiya University
01.2023
Skills
- Security Control framework
- Governance
- Risk & Compliance
- IT General Controls
- IT Control Testing
- Risk Management Frameworks
- NIST
- SharePoint
- IBM Open Pages
- Archer
- GRC Activities
- Auditing
- Advisory
- MS Office
- Business Object
- Macros
- Control testing
- HIPAA
- GDPR
- ISO27001:2013/2022
- Document Observations
- Remediation
- Oracle
Certification
ISO/IEC 27001:2022 Lead Auditor, MasterMind
Timeline
IT Analyst
Trends Infonet Solution Pvt Ltd
12.2023 - Current
BSc - Computer Science
Kakatiya University