Whirlpool Corporation

Data Privacy Officer & Cyber Security Manager - Asia

PwC India

Assistant Manager

Wipro

•	Performing Internal ITGC Audits.
•	Perform IT audits basis MSA requirement, Organisation policies and applicable standards.
•	Identify and highlight gaps to respective teams for closure.
•	Report identified issues to Senior Management.
•	Follow up and validate closure.
•	Handle PCI DSS, ISAE 3402 and SOX 404 audits.
•	Support organization security and compliance activities.

IT GRC Consultant

Fiserv

•Part of GS India Security and Compliance Team
•ISMS Implementation and maintenance.
•Ensuring compliance to PCI DSS, SSAE 16, ISO 27001 and Corporate Audits.
•Conducting Internal PCI DSS and Quarterly internal audits aiming to identify gaps and timely remediation.
•Performing ODC audits as per client requirements.
•Conducting Risk Assessment and Business Impact Analysis.
•Implementation and testing of BCP plan.
•Coordination with various support functions in remediation of identified gaps.
•Running Security Awareness campaigns.
•Reviewing monthly Vulnerability Scans reports to ensure timely remediation of identified vulnerabilities.
•Implementation of new controls based on the organizational changes, framework updates and audit findings.
•Coordinating with External Auditors and facilitating external audits. 

     Additional Responsibilities

•Part of Enterprise Risk and Resilience Team
•Development of Client Assurance framework to provide consistent and timely response to Fiserv’s customers and clients’ vendor security questionnaires.
•Creation of repository of questions with enterprise, client, business unit, product and location specific details of security controls as implemented in the organization.
•Interacting with various ISOs and function heads across the globe.
•Creation of process documents, communication plans.

Senior Associate

Tata Consultancy Services

Client: Indian Government Organization
Project: Strong Authentication Solution
•Leading the complete design and delivery of Two Factor Authentication Solution.
•Designed Security Solution to provide Strong Authentication (Two Factor Authentication) 
•Designed High Level and Detailed design document in accordance with client requirements.
•Presented solution to the client.
•Activity involved creation of Use Cases and Test Cases.
•Defined various roles, policies and workflow processes.
•Integration of solution with other proposed and existing security solutions.
•Presently working on Implementation of RSA SecurID solution.
•Worked on development of Hardening Guidelines for windows desktop systems.

Systems Engineer

Client : UK Government
Project: Vulnerability Assessment and Penetration Testing
•Conducted Network and Application VAPT on client’s internet facing infrastructure,   applications and internal network and portal.
•Conducted network vulnerability scanning using Nessus.
•Performed manual testing using Nmap, Netcat, Openssl, and Metasploit auxiliary modules.
•Conducted Vulnerability Assessment & Penetration testing for Scheme website application and internal portals using HP WebInspect and WebScarab.
•Analyzed the results and involved in report preparation for the vulnerabilities discovered along with the appropriate recommendations and risk factors.

Assistant Systems Engineer

Client : US Based Financial Service Provider
Project: Security Operations Center (Vulnerability Management and Surveillance).
•Surveillance and analysis of incidents using SIEM Tool ArcSight ESM , nCircle IP360 and AirDefense using logs from various perimeter devices.
•Monitoring client network from the Information Security perspective using ArcSight ESM 4.0.
•Handling security incidents in real time.
•Finding out anomalies and taking preventive measures for external attacks.
•Monitoring and prevention of any sensitive data leakage from the network using Vontu 11.1.
•Performing BAU and on demand vulnerability scan on the network using nCircle IP 360.
•Preparing vulnerability and security related reports.
•Handling tickets through IBM ticketing tool ManageNow.
•Handling WebSense exceptions and analyzing WebSense logs time to time.
•Interacting with different vendors on different issues and working along with them to resolve those.
• Analyzing phishing and spam emails.

Information Security Analyst

Client : US Based Financial Service Provider
Project: Vendor Security Assessment
•Assessing third party vendor’s security posture and the level of security controls they have in place throughout their enterprise according to client’s security policy and requirements and help in decision making.
•Conducted vendor’s security assessment using Standard Information Gathering (SIG) reviews and Application Service Provider (ASP) reviews.
•Assessing controls present in vendor’s environment based on response to questionnaire and security documents and audit reports shared by vendors.
•Updating assessment findings on Archer and following up with vendor towards closure.

Threat Modelling of e-commerce web-application.
•Analysing architecture and workflow of the application to identify possible threats and risks using STRIDE and DREAD.
•Defining use and misuse case scenarios, entry/exit points and trust boundaries
•Developing Threat Model and Attack trees using Microsoft Threat Analysis and Modelling tool, and  using MS Visio. 
•Suggesting mitigation strategies for secure application development.

Internship at

Information Security and Privacy Professional with 12+ years of experience in various Information security fields. Primarily involved into ITGC Audit, Security and Compliance, Vendor Security Assessments, VAPT, Network and Application Security, Vulnerability Management and Threat Modelling. 
Have good experience leading cyber security and privacy implementation projects and team. My qualifications include Masters in Cyber Security and Engineering Degree in Computer Science; along with CISA, ISO 27001 Lead Auditor and ITILv3 certification; and detailed knowledge of various security tools, technologies and best practices. Also achieved Azure and Ali Cloud Certificates. I have also published one research paper titled “Secure Framework for Social Networks”.

Taplio

Rishi Raj Srivastava's Linkedin Analytics

Rishi Raj Srivastava

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Rishi Raj Srivastava's Linkedin Analytics

Rishi Raj Srivastava

Want to drive more opportunities from LinkedIn?

Rishi Raj Srivastava's Linkedin Analytics