Srinivasa Nagaraj

- Consulting and guidance on Security best practices across UAE, Kuwait, Oman etc.
- ISO 27001:2013 Implementation
- ISR - Information Security Regulation implementation
- NESA Implementation
- Risk Assessment (ISO 31000) implementation for government and private entities.
- Designed the unified controls framework for Paramount
- Designed a risk assessment solution for Paramount.
- Security Auditing for IT and Enterprise Wide
- Part of the pre sales team in designing solutions for potential clients on security, risk assessments and compliance.

- Part of the Architect team which implemented an Access Management Solution in GS.
- Part of the internal audit team for the first ISO 27001:2013 audit in Goldman Sachs, India
- Lead a team for managing Access reviews for over 300 Servers and 40000 Entitlements across all locations of Goldman Sachs across the Globe.

- Designed solutions on GRC solution - Archer for clients
- Developed Security Models for organizations world wide.

- SPOC for ISO 27001 and ISO 20000 management in Oracle financial services
- Managed implementation of security controls and audits for all OFSS clients (Deutsche Bank, Alliance Bernstein, State street Bank, Barclays Bank, Citibank etc.)
- Designed policies and procedures for security and Service management
- Designed Risk management framework for OFSS and lead the team for risk assessments.
- Evaluated technologies for implementation
- Trained IT department across 5 locations in India for ITIL.
- Managed Projects for Australian Banks for managing Security and Service Levels.

800-171 and ISO 20000) across organizations in the UAE region, Kuwait and
Oman.
• Designing Risk Assessment methodologies based on ISO 310000 framework and conduct
risk assessments for IT department and across the organization.
• Conducting Internal Audits for ISO 27001:2013, ISO 20000, ISR and NESA
• Draft Policies and procedures for Information security practices
• Designed and provided Security Awareness Sessions across multiple organizations.
Solutions Design and Architect
• Architected the Risk Assessment Solution in Paramount Computers Systems.
• Architected the Unified Compliance controls framework mapping the ISO security
standards with the local regulations (ISR, NESA) and NIST 800-53 and Garner Adoptive
Security Architecture. (GASA) at Paramount Computer Systems.
• Part of the Architect team for Access management programs designs in Goldman Sachs
PROFESSIONAL PORTFOLIO
Profile 1: ISO27001, NIST 800-171, ISR, NESA Implementation and Auditing
Key Deliverables:
• Single point of contact in Information Security Management System and audits
• Risk assessment across all groups of the organization
• Responsible for Conducting management reviews meetings
• Awareness generation among all employees by conducting security week, circulating
periodic mailers and posters
• Security Management - User level questionnaire and antivirus
• Patch Management, incident response
Profile 2: ISO 20000 certification
Key Deliverables:
• Team leader for the ISO 20000 Recertification for Oracle
• Assist in Preparation of Information Technology Service Management.
• Acted as the single point of contact for the audits.
• Risk assessment across all groups of the organization.
• Coordinating with the all the ITSM process owners.
• Front ending the audits.
• Awareness generation among all employees by conducting security week, circulating
periodic mailers and posters.
• Service Management - Making sure that the best practices is followed in the process.
Conducting reviews with management and employees
Profile 3: Central Access review program and privilege management program (Goldman
Sachs)
Worked on one of Goldman Sach’s biggest programs where access and entitlements are reviewed
for 28000+ users and managers w.r.t servers/ applications and deployments.
Key Deliverables:
• Mainline and design the Program
• Folowup with coordinators around the globe to ensure programs in the regions are
working as per planned and get weekly updates.
• Report to the top management about the status and ensure federal audits move
smoothly over the program.
Profile 4: Information Security Policy drafting for one of Australia’s biggest banks for offshore
development centre in India. Client: National Australian Bank’s (NAB).
The project involved NAB to setup an offshore development center in 3 locations across India.
For all of the locations in India, a centralized Information Security Policy and procedures
document was drafted and the parameters was deployed to all the systems in the NAB secure
working area.
Key Deliverables:
• Identify the policy clauses to be applied.
• GAP analysis of the policies between Oracle, NAB and ISO27001.
• Identify the best practices in the Information Security Standards ISO27001 and map the
sections to the new policy document.
Coordinate with the NAB Information Security Officer regarding the clauses for the policies and
the MSA agreements
Profile 5: Client Audits on Information Security (Clients

Information

Client