Oman Arab Bank

Governance:
Assisting bank in developing and implementing effective Business Continuity Management (BCM) policies and frameworks aligned with industry standards and regulations.
Collaborating with client leadership to establish BCM governance structures and cross-functional working groups
Conducting compliance assessments to ensure BCM practices meet relevant regulatory requirements and guidelines.
Leading risk assessments and business impact analyses to identify critical processes and dependencies for clients
Providing expert advice on BCM strategies to client executives and boards, gaining support and commitment for BCM initiatives.
Management:
Facilitating the development, implementation, and maintenance of comprehensive Business Continuity Plans (BCPs) and documentation for clients.
Conducting thorough risk assessments and business impact analyses to update risk profiles and prioritize recovery strategies.
Overseeing the testing and validation of BCPs and Disaster Recovery (DR) plans through tabletop simulations and exercises.
Collaborating with IT teams to oversee the development and maintenance of IT Disaster Recovery Plans and procedures.
Conducting reviews of BCM plans and procedures to address emerging risks and business changes.
Designing and delivering training programs to educate client employees on BCM best practices and their roles during emergencies.
Consulting and Strategy:
Providing strategic guidance on BCM enhancements and optimizations tailored to clients' specific business needs.
Identifying areas of improvement in BCM processes and developing practical solutions for clients.
Offering expertise in industry best practices, standards, and certifications, such as ISO 22301, to enhance the maturity of the BCM program.
Supporting clients in maintaining business resilience by anticipating and mitigating potential risks.

Enterprise Risk Management-BCM Consultant Outsourced - TIG Oman

Information Security Consultant and Specialist Onsite for Oman Arab Bank
Implementation of Information Security Governance, Risk and Compliance (GRC)
Risk Management
Policies Management
Incident Management
Vulnerability Management and Remediation
Business Continuity Management
Security Incident and Events Management & SOC Process - Project Management (Waterfall & Agile)
Cybersecurity Project Management
Business Case Development, RFP, RFI preparation
Process Implementation
Data Privacy and Protection
Information Security and Cybersecurity Awareness - Content Development and Delivery

Information Security Consultant Outsourced-TIG Oman

Project Manager & Information Security Specialist
May 2017 – Present, Oman Arab Bank, Muscat, Sultanate of Oman
Project Management for Implementing Security Information and Events Management (SIEM) solution for the bank Risk Management Division-Information Security Department
Business Continuity Management for the Banking Operations under the Risk Management Division
Developing and Updating of Standard, Policies, Procedures and Guideline Documentation on Information Security Governance
Mentoring and guiding of Information Security Team Members on Information Security Functional requirements

Project Manager & Information Security Consultant -Paramount Computers

Oman Cement Company S.A.O.G

Senior Consultant – Information Security Management System
Oct 2015 – April 2017, Muscat, Sultanate of Oman (1 Year 6 months) - Oman Cements Company SAOG.
Implementation of Information Security Management System - ISO 27001:2013 Standard Framework for the leading Cement Manufacturer of Oman
Established IS Forum with a dedicated role of Information Security Senior Officer for the client Organization
Created and Reviewed Policies & Procedures Documentation
Risk Assessment & Controls Gap Assessment
Security Architecture Review follow ups and closure
Vulnerability Assessment & Penetration Testing follow up and closure
Guidance and recommendations for Cyber Security Tools & Technology solutions
Information Security Awareness Generation
Internal Audit & Closure

IT Security Consultant - Outsourced - Paramount Computers

HCL Technologies Ltd

Senior Manager - Information Security
Aug 2012 - Sep 2015

CISA & ISO 27001 Lead Auditor
Senior Manager - Information Security
Various roles includes,
Coordination of Project Management - Cyber Security Organisation of HCL - InfoSec Work streams
Project Lead - Information Security Incident Management System
DISO (Delivery Information Security Officer) - BFSI domain
DCO (Delivery Compliance Offier) - Healthcare, Logistics and Media Publishing Verticals
Digital Ambassador - InfoSec Communications
Managed Internal Audits and coordinated External Audits of HCL & its Business Delivery Engagements
Information Security Risk Assessment, Risk Analysis & Business Continuity Planning (BCP) Facilitation
Information Security Awareness,Training and Development
Designing, Developing and Managing Information Security Awareness & Training Programme on various standards and regulatory requirements like ISO 27001, PCI-DSS, SSAE16, Data Protection Act, 1998, EU and client specific security requirements within the organisation based on various roles of employees and through various methodologies.

Training Content Development, Managing Online Exams, Generating Awareness through Mass Communications, Conducting Enterprise level Information Security Awareness Events, Train the Trainer Sessions, Rewards & Recognition Programmes, Initiated InfoSec Compliance as a part of Employees KRA etc.  Managed Organisation level InfoSec Awareness Annual Events with encouraging feedback from the Top Management.

Information Security Incident Management
Developed a work-flow in-house for managing Information Security Incidents in line with industry standards

Manager - Information Security
Apr 2008 - July 2012

Assistant Manager - Training
Apr 2006 - Mar 2008

Senior Manager-Information Security

IT, Computer and Management Skills Training

Managed Traineeship Programme as a Manager-Students Relations and Imparted Management Skills Development Training Programmes as a Senior Project Executive – Academics, Counseling & Operations Headed the ISO Process of an ISO 9001:2000(E) institution as a Process Owner & Head of the Department – Computer Science teaching in programming languages like C, C++, Java, Visual Basic and HTML courses.  Imparted computer programming and soft skills training to varied groups of aspirants as a freelance trainer.

IT & Soft Skills Training & Development, Selection & Recruitment, Motivation, Counseling & Mentoring

Freelance (Self employed)

Successfully managed the business development of various territories of leading pharmaceuticals giants like Ranbaxy and Knoll group of companies, promoting financial services and products of Sterling Holiday Resorts Group of companies

Marketing, Business Development & Customer Relationship

Accomplished Information Security and IT Security,  Governance Risk and Compliance Consultant with over 25 years of experience, specializing in Information Security, Governance, Risk, Compliance (GRC), Project Management, Sales and Marketing, Business Development, and Human Resources Training and Development. Proficient in developing strategic frameworks for Information Security, Data Privacy, and Business Continuity Management across multiple sectors. Skilled in compliance assurance, audit management, and delivering IT and Soft Skills training programs.

Taplio

Guruvayurappan Mani's Linkedin Analytics

Guruvayurappan Mani

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Guruvayurappan Mani's Linkedin Analytics

Guruvayurappan Mani

Want to drive more opportunities from LinkedIn?

Guruvayurappan Mani's Linkedin Analytics