Sri Kanth

• Group Lead Information Security Personnel
• Implementation and Governance of Security Frameworks: - RMiT, ISO 27001:2013 (ISMS) & PCIDSS
• Provide Information Security Reviews and Updates to Company Board of Directors eWallet Security Testing and Review
• Payment Gateway PCIDSS Security Controls implementation and annual Refresh
• Digital Innovation Security Governance and Planning, and DR Project lead
• Lead Consultant for Incident Response, BCP DR Testing, Technical and Process groupwide
• Managing Overall Group Cybersecurity annual budget forecasts
• Cybersecurity Strategy and Planning exibited via Maturity model and Targeted Deliverables
• Deployment of Secure Software Development Lifecycle Practices; Policies and Procedures
• Deployment of Secure coding tools and Reporting
• Lead on Digital technology Security covering Fintech, Urbantech security
• Oversee and support the implementation of special projects as and when required
• Implementation of DevSecOps pipeline
• Planning and Governance Security implementation covering basics like Procurement and
• Supplier Security, Staff Education and Awareness, Red Teaming and Annual Penetration testing
• Public Cloud Security Review and Architecture
• Public Cloud Security Operations and Maintenance
• In charge of determining best security technologies to deploy in the network at a reasonable cost and also to ensure the long term use is aligned with business needs and projects
• In charge of the department SLA measured by existing tools
• Identify root cause of problems and assist in remediation strategy
• In charge of presenting to the board quarterly on cybersecurity existing state of security and breaches and identifying key Security Risks with potential remediations

• To Design, Build, Deploy and Deliver a full security Architecture for SKIN Solution.
• High level and Baseline security design and architecture
• Lead ISO27001 standard implementation member for Jabatan Imigresen Malaysia
• Conducting evaluations, strategy and deployment of various technologies for the immigration department, e.g. Identity and Access Management, Privileged Access Management, SIEM, Vulnerability Management and Network Security technologies.
• ISMS Security policy preparation and awareness trainings
• Managing overall cybersecurity budget and deliverables

• Lead IT Security Principal Engineer for TdC covering asoects of IT and Data Centers under TdC group
• Implementation and monitoring of ISO 27001 (ISMS). Head of the Working Committee. Formulate Strategy and roadmap on Security and overall security program for TdC.
• Initiate security programs including Security in project management, Incident response and BCM for TdC
• In charge of PCI-DSS and ISO 27001 programs and ensuring compliance and PCIDSS certification covering credit card transactions via TdC portals
• liaison in Managing regulator expectations (MCMC) and Manage IT Risks performing Security Risk Assessments for Overall IT
• IT Disaster Recovery Lead performing functions to draw plans and identify systems that require DR and manage overall DR program.
• Divisional Audit Representative, manage Internal audit and external auditors such as PCIDSS, ISMS and Big-Four audit firms
• Responsible on IT Security Awareness to TIMEdotCom group. Establish and implement security policy and procedure to compliance with internal and external standard (Int'l Standard
• Apply security best practice to govern confidentiality, integrity and availability on TIME dotCom infrastructure and business information
• Responsible for overall management and control of IT Security Operation. Oversee the security function on various entities of TIMEdotCom by establishing comprehensive security monitoring and mitigation toward any form of intrusion to TIMEdotCom IT infrastructure
• Conduct security auditing, penetration testing,vulnerability assessment and security analysis in periodic manner
• Perform periodic security risk assessment including disaster recovery and contingency planning, and coordinate internal audits to ensure that appropriate access to company information assets is maintained at acceptable levels as agreed by stakeholders
• Represent IT Division in information Security Committee in its policy development efforts to maintain the security and integrity of information asset in compliance with accreditation standards
• Appraise, evaluate and ensure the right security solution or advice given to save guard TIMEdotCom infrastructure (IT or Telco)
• Provide consulting with respect to application security and roll out of applications that serve business interests of the group by leveraging the use of specific technologies to identify code security issues and risk remediation's

• Jabil Circuit is an Industry covering OEM expects under Manufacturing
• Manage Global Security Operations team for a fortune 500 company that comprises of 130,000 staff members at 50 locations worldwide.
• Completed the building of a Security Operations center with hubs in Malaysia, India and America along with staffing, center, policies and technology.
• Manage SLA which is measured by the service center ensuring 90% compliance rate
• managers meeting. I have been successful at keeping SLA's at 100% for the past several months.
• Work closely with the Problem management team and identify gaps in processes and help fill in. Identify root cause of problems and assist in remediation strategy.
• Headed and implemented security technology; content filtering and IPS company wide (Asia, Americas and Europe). 120 IPS devices Worldwide and defined processes and lead the project team. Assisted in co-ordinating the content filtering project company wide
• Lead in defining process and procedures for the Security Operations and Information Security team.
  - Review security Policy company wide.
  - Conduct appraisals and review of staff.
• Manage Global Security Operations Budget
• To Identify, evaluate, conduct, schedules, and lead technical Security Operations analysis on functions to ensure all applicable Security Operations requirements are met.
• Assisted in Making decisions that are critical in the areas of access control, information security implementation, and project planning, with the potential to affect the successful execution of business projections.
• Perform security auditing, Security Operations risk assessments and develop operational standard operating procedures

• Documenting the information security policies and procedures instituted by the organization's Information Security Committee
• Implementing the organization's information security policies and procedures
• Providing direct information security training to all employees, contractors, alliances, and other third parties
• Monitoring compliance with the organization's information security policies and procedures among employees, contractors, alliances, and other third parties, and referring problems to appropriate department managers or administrators
• Monitoring internal control systems to ensure that appropriate information access levels and security clearances are maintained
• Performing information security risk assessments and serving as the internal auditor for information security processes
• Preparing the organization's disaster recovery and business continuity plans for information systems
• Initiating, facilitating, and promoting activities to foster information security awareness within the organization
• Served as the information security liaison for users of toll systems

Provide Security Consulting Services on Info-Security Processes and Technology to Major banks local and foreign. This includes setting of devices, remote monitoring 24x7, threat analysis, Security Report presentation, Log Analysis, Definition of rules and policies and setting rules on potential threats.

Documented the Incident handling procedure for Threat alerts received

Acquire broad understanding of relevant processes and provide 3rd-Tier Info-Sec analyst.

Performed penetration testing and vulnerability assessment for Banking clients and lending advice with remedial action.

Executed OS hardening, Setting up firewalls and Intrusion Detection Systems

Monitor and generate Threat Intelligence Reporting and perform overall analysis for client based on total threats received from various sources.

Derived data from using scripts on SQL server and compiled as reports for clients and presented current state of security to the Information Security team at the client's end

Correlation of events based on findings were done to identify unique Incident types that are effecting client network. To provide workaround and solution for clients based on findings and monitoring of events.

Conduct Security GAP Analysis based on ISO27001 standard and provide remediation strategies

Perform 24x7 security operations monitoring covering local and foreign financial entities

Started Cybersecurity career in this organization starting as a Security Analyst and grew by rank and file

Manage team and individual performance against objectives set by management