Sudheer Kalavendi

Maintaining the risk operation on overall • IDAM controls. Grant and revoke access to systems, applications, and data based on role-based or attribute-based access control (RBAC/ABAC). Automate access provisioning using IAM tools and workflows. Create, modify, and delete user accounts across various systems. Maintain compliance with internal and external security standards like ISO 27001, NIST, and GDPR. Conduct periodic access reviews and recertification.

Involved in creating policies and procedures on ISMS (Information Security Management System) - ISO 27001: 2013 Standards. Conduct sessions on ISO 27001: 2013 & GDPR for newly onboarded employees. Assist Risk management functional leaders in overseeing compliance activities relating to information security. Support Periodic Risk Reporting to IT and security Leadership within deadlines. Maintain strong working relationships with Business, IT & other Security colleagues.

Ability to plan and lead meetings with control owners and external auditors. Ability to clearly define control requirements to control owners or explain control evidence to external auditors. Defining and implementing security controls by enterprise policies, standards, and procedures. Experience in Information security and business continuity internal audits.