Ajay D.
Details
Bachelor in Business Administration
University of Madras
1998 : 2002
D.E.E.E
Electical and Electronics Engg
P.T. Lee Chengalvaraya Naicker College of Engineering and Technology
1986 : 1988
2018 : Present
ConnectiveRx
Information Security - GRC TPRM
IS Manager in Product Engineering and Operations.
Responsible for security posture of Product Development team from development, deployment and management. Projects on Cybersecurity, Infrastructure security, Risk management, vulnerability assessment, Threat and vulnerability management, security monitoring and management.
1997 : 2018
Oracle
IS Manager
Information Security architect
• Review and develop access and security policies for Network, data & voice
• Develop and maintain a security awareness program that effectively changes behaviors—at work and at home.
• Design and deploy Firewall & DMZ and remote monitoring.
• Perform Network Vulnerability assessment for multiple sites.
•Automated scans and formal process for Product security testing.
• Deployed and implemented Sandbox environment and Virtualization (VMware, Vbox).
• Designed and developed processes and procedures for system Backup, COB and DR planning.
• Define policies for Server, DB, apps and network.
• Led the effort to integrate a newly acquired company of 100+ employees into the company Email, network and server infrastructure, managing all communication links, planning, and implement secure access.
• Developed and documented IT policy and procedures, work with the IS office to develop a metrics framework that can effectively measure these requirements.
• Perform Infrastructure Security audit of Internet Banking environment and perform vulnerability assessment for Banking and financial institutions
• Conduct Network and O/S vulnerability tests and Penetration tests on internal and external
Process Audit; content mapping;Secure Network design;Network security Audit;IS systems & Network Architect;Infrastructure requirements, Network/ Data center design;Threat and Vulnerability management;Incident response and remediation
Virtualization : VMWARE, Oracle VM, Virtual Box. O/s (Sysadmin) : Windows 2008/12, Oracle Ent Linux 6/7,Solaris 10&11. Firewall/Security : Cisco ASA, IDS, IPS, Nessus, NMAP, Network s/w : Sniffer, Solar winds, VNC, Tripwire, Qualys. Regulatory/Standard : COBIT, ITIL, SOX 404, SAS70, SSAE16 ,ISO27001. Compliance : Solarwinds, McAfee, DEVOPS. Vulnerability Tools : Nessus, metasploit Kali, Qualys, IBM Appscan. SIEM Tools : McAfee ESM, Solarwinds, QRadar, Splunk
Certifications :
CISSP, CISA, CISM, CRISC, ITIL
1997 : 2012
OFSS
IT Manager
Skills
Accountability, Content Mapping ITIL process, Cybersecurity, Data Center, Information Technology, IT Audit, ITIL, Management, Networking, Network Security, Personal Development, Project Management, Risk Assessment, SDLC, Vendor Management
About
IT professional with strong expertise in IT management, IT security management, IT enterprise architecture. Demonstrated knowledge in establishing and implementing large Information security programs. Designed and implemented automated tool-based vulnerability management framework to continuously monitor and remediate Cybersecurity threats and vulnerabilities for large banking and financial organizations. My hands-on security skills and leading by example with a passion for aligning security architecture, controls, processes, policies and procedures with security standards & operational goals for protection of the enterprise network.
Abilities Summary
Core competencies in Information security, as a Security architect designing secure networks for web-based applications, as a Security administrator defining and implementing IS policies, security controls for OS (Operating systems), risk assessment of IT infrastructure. Threat & vulnerability management, creating security awareness, SIEM management, Incident Response, analysis, remediation and post-mortem.