Arul T

Extracted contractual security and compliance requirements from MSAs and SOWs, translating them into test procedures, controls and actionable implementation guidance to achieve 100% contractual compliance before steady state. Led cloud and enterprise risk assessments across SaaS, IaaS and PaaS environments, covering network, physical, logical, endpoint and cloud security controls, with risks tracked and managed through formal risk registers. Designed, implemented, and governed cybersecurity policies, procedures and control frameworks aligned with NIS2, ISO 27001 and contractual obligations, providing client facing regulatory and technical advisory support. Implemented and managed Identity and Access Management (IAM) solutions in AWS and Azure using Azure AD, RBAC, Conditional Access, MFA, and Privileged Identity Management (PIM), coordinating with IT, HR, and business stakeholders prior to go-live. Established centralized logging, monitoring, and incident response capabilities using Azure Monitor, Log Analytics and Microsoft Sentinel (SIEM), enabling automated alerting, continuous security monitoring, and rapid threat detection. Conducted application and infrastructure risk assessments across the SDLC using SAST, DAST and IAST tools, integrating security into Agile, DevOps, and DevSecOps pipelines while minimizing impact on delivery timelines. Performed vulnerability management activities including production server, network and credential scans; reviewed assessment reports; defined mitigation plans; and conducted firewall rule reviews to reduce attack surfaces. Led internal and external audits (ISO 27001, SSAE16/SSAE18, SOC), supporting audit planning, execution, reporting and remediation, and implementing corrective actions for NIS2 non-compliance findings.

Planned and delivered Information Security and ISMS initiatives, providing technical leadership for managed security services and enterprise security operations. Conducted periodic risk assessments and drove continuous improvement programs to maintain compliance with ISO 27001, PCI DSS, GDPR, SSAE16/SSAE18, and CIS cybersecurity controls. Led GRC initiatives for global banking and enterprise clients, executing internal audits and risk assessments in alignment with ISACA standards, identifying control gaps, and recommending remediation actions. Coordinated and governed incident management, user access management, security monitoring, and vulnerability assessment and penetration testing (VAPT) activities across production environments. Designed and implemented Identity and Access Management (IAM) solutions, including identity lifecycle management and segregation of duties (SoD), with executive reporting on IAM performance and risk metrics. Delivered compliance programs and certification readiness for ISO 27001, PCI DSS, and GDPR, supporting global clients through audit planning, execution, and closure. Developed and enforced security governance policies aligned with business risk appetite, providing client-facing advisory on risk, data protection, and regulatory requirements from both legal and technical perspectives. Developed, tested, and maintained Business Continuity and Disaster Recovery plans, including Business Impact Analysis (BIA) and service interdependency mapping to ensure organizational resilience. Led vulnerability management activities, including server, network, and credential scans; firewall rule reviews; and remediation planning to reduce attack surfaces. Investigated end-to-end information security incidents, managed incident notifications and communications, and maintained accurate records in incident management platforms.

Managed day-to-day firewall operations across Cisco PIX and ASA platforms, ensuring secure network traffic flow and policy compliance. Coordinated 24/7 network security operations with the Network Operations Center (NOC), supporting continuous monitoring and incident response. Performed Business Continuity and Disaster Recovery (BCP/DR) failover testing to validate system resilience and recovery readiness. Provided network troubleshooting support for enterprise backup environments, ensuring reliability and availability of critical data. Led cybersecurity incident handling and response activities during client engagements, including high-availability automotive projects. Identified, assessed, and mitigated cybersecurity risks through proactive security controls and operational monitoring. Administered user accounts, role-based access controls, and Group Policies, ensuring alignment with policies and regulatory standards. Executed daily incremental and weekly full backups using Symantec Veritas, ensuring data integrity and recoverability.