Pavankumar Reddy Gangalakunta

• Responsible for implementation of SOX 404 Identity and Access management controls across all the SAP applications
• Access reviewing, access recertification, ensure the control deviations are documented and approved in timely manner
• Reviewing monthly & quarterly SOX IT access controls reports
• Trained on Fortanix SDKMS tool, implementation of centralized Key Management Solution - Fortanix for both AWS & Azure environments
• Coordinator/Facilitator for corporate & external audits such as ISO 27001, SOC 1/SOC 2
• Assisting delivery teams during the reviews, external audits and process revisions

• Lead an account in banking domain, providing service to client Commonwealth Bank of Australia (CBA) for Identity and Access Management, privileged access control, Vulnerability Management, Remediation and Patching, Policy Compliance, Impact analysis, Risk Management, Internal/External audits, email and fraud investigations
• Travelled to Sydney - part of transition and implemented the CA PAM tool for IAM governance and UAR activity
• Performing e-discovery (mailbox, home drive exchange mailbox extraction) for the security investigation requests raised by client and secure data transfer through NetApp tool
• Performing password management activity with Norton Secure password generator and storing the passwords in secure vault - Password manager tool
• Performing User Access Revocation for all the platforms as per APRA requirement
• Preparing weekly status reports, metrics data and sharing the dashboard to ASO (Account Security Officer)

• Thorough implementation of security governance programme including the development, implementation, maintenance and monitoring of ICT security policies, procedures and guidelines
• Preparing SOA (Statement of Applicability)
• Designing and applying solutions/policies that would meet or exceed functional, operational, performance and security requirements while minimizing technical risks in implementation
• Conducting the process compliance reviews and internal audits in line with information security requirements
• Managing vulnerability scanning tools - ensure that infrastructure is scanned for vulnerabilities and compliance validation
• Reviewing the Asset Management, Access controls, HR security policies, Group policies, Network security, Information security incident management, BCP, hardening policies, Compliance Management, Patch management, Clear screen policy, Backup policies and submits the process compliance report on monthly basis to senior management
• Navigated the use of controls, tools and best practices for the network security devices to identify anomalous events and security infections that may exploit system vulnerabilities there by reducing their impact
• Reporting & Analytics - Update and maintain operational dashboards that highlight service status and coverage