سوبرامانيان رامان

• Led sensitive data discovery initiatives across the Microsoft 365 ecosystem
using Microsoft Purview, ensuring accurate identification and protection of
critical information assets.
• Administered Microsoft Defender and Purview DLP across endpoints, cloud
services, and email, designing and validating data leakage policies aligned
with enterprise security standards.
• Implemented data protection controls—including encryption, labeling, and
watermarking—and delivered weekly compliance insights, risk dashboards,
and deviation reports to senior leadership.
• Monitored data flows, investigated anomalous user activities, and
continuously strengthened DLP controls to reduce exposure risks.
• Conducted cross-functional workshops to define key data elements, clarify
ownership, and establish enterprise-wide classification and governance
models.
• Optimized DLP policies across cloud platforms, gateways, and storage
systems, contributing to a measurable 20% reduction in data leakage
incidents.
• Drove the rollout of Insider Risk and Exit Risk Review programs,
safeguarding sensitive assets and significantly accelerating breach
investigation and resolution timelines.
• Supported business case creation and SOW reviews.

Associate cyber security consultant

• Risk Mitigation: Fine-tuned DLP policies across cloud environments, secure gateways, and storage
platforms, delivering a 20% decline in data leakage incidents.
• Data Intelligence: Orchestrated enterprise-scale sensitive data discovery across the Microsoft 365
landscape using Microsoft Purview, enabling precise visibility into high-risk and regulated information assets.
• Data Loss Prevention (DLP) Strategy: Architected and enforced Microsoft Defender and Purview DLP
controls across endpoints, email, and cloud workloads, ensuring strict adherence to organisational security
and compliance mandates.
• Information Protection: Deployed advanced data protection mechanisms, including encryption, sensitivity
labelling, and watermarking, to fortify data confidentiality and compliance posture.
• Threat Detection & User Behaviour Analytics: Scrutinised data movement patterns and user activity
anomalies, systematically refining DLP rules to curb insider threats and data exfiltration risks.
• Data Governance Frameworks: Championed cross-functional workshops to formalise critical data
elements, assign data ownership, and institutionalise enterprise-wide classification and governance
standards.
• Insider Risk & Exit Controls: Spearheaded the implementation of Insider Risk and Exit Risk Review
programs, substantially shortening breach investigation cycles and containment timelines.
• Compliance Reporting & Executive Visibility: Synthesised weekly compliance metrics, risk dashboards,
and deviation analyses to equip senior leadership with actionable security insights.
• Commercial & Pre-Sales Enablement: Contributed to business case formulation and Statement of Work
(SOW) evaluations, aligning data security initiatives with contractual and business objectives.

Information security specialist who look after clients security portfolio.

Lead endpoint and data security

• Incident Response Coordination: Directed incident response lifecycles across endpoint and DLP events,
compressing remediation timelines by 40%.
• Network Data Protection: Rolled out Network DLP across email, web, and file transfer channels,
reinforcing GDPR and HIPAA regulatory compliance.
• Access Control & Policy Governance: Formulated role-based security policies aligned with business
workflows and regulatory mandates, strengthening least-privilege enforcement.
• Security Platform Engineering: Established and validated Trellix ePO environments in test setups,
ensuring deployment readiness and configuration accuracy.
• Endpoint Security Enablement: Provisioned and governed enterprise-wide deployments of Trellix Agent,
ENS, VSE, Solid core (Application Control), DLP, and RSD across enterprise and local systems.
• ePO Administration & Lifecycle Management: Governed Trellix ePO application administration,
including configuration, upgrades, policy orchestration, and operational support for managed assets.
• Patch Management: Applied Trellix extensions, software packages, and hotfixes to maintain platform
currency and security posture.
• Media Protection: Enforced file system and removable media protection controls to prevent unauthorised
data extraction and misuse.
• Endpoint Troubleshooting & Stability: Diagnosed and resolved Trellix agent-to-server communication
failures across distributed environments, restoring endpoint visibility and control.
• Malware Incident Handling: Executed virus incident containment and eradication procedures, minimising
endpoint compromise and operational disruption.
• Security Documentation & Compliance: Authored comprehensive Standard Operating Procedures (SOPs)
and Installation Verification Instructions (IVIs), supporting audit readiness and operational consistency.

• Implemented Trellix Endpoint DLP to block unauthorized PCI/PII/PHI
transfers, reducing insider risk by 35%.
• Deployed Network DLP across email, web, and file channels ensuring
GDPR/HIPAA compliance.
• Designed role-based policies aligned with business and regulatory
requirements.
• Coordinated incident response workflows, reducing remediation time by
40%.
• Installation and configuration of Trellix ePO setup in test environment.
• Configuration and deployment of endpoint security products, Trellix Agent,
Endpoint Security (ENS), VSE, Application (Solid core) and change control,
data loss prevention (DLP) and RSD on Enterprise/Local edition systems.
• Performs Trellix ePO applications administration, implementation,
configuration, upgrading, policy creation, maintain & operations on
managed systems.
• Updates all authorized Trellix extensions and software packages to the
latest ePO version. Install all Trellix product hotfixes.
• File, removable media access protection and data protection.
• Analyze and Troubleshoot Trellix agent server communication failures on
enterprise/local edition systems.
• Performs Virus incident handling process and troubleshooting incidents.
• Prepares documentation for Standard Operating Procedures (SOP) and
Installation Verification Instructions (IVI).