Looking for a job

Ramesh Reddy

@rameshreddy3

I'm a Cybersecurity professional with 8+ years, specializing in cloud security, IT Audit, cloud security, GRC, risk management, & ISO 27001 compliance

Mexico

Message

What I'm looking for

Seeking a role in cybersecurity, cloud security, security architecture, or GRC, leveraging 8+ years in cybersecurity and information security governance. Focused on security strategy, risk management, compliance, and audit readiness, with opportunities to lead initiatives, collaborate across teams, strengthen enterprise security, and deliver measurable business impact.

Hi , I'm a Cybersecurity and GRC professional with 8+ years of experience in information security governance, IT Audit, cloud security, third party risk management, compliance, and enterprise risk assessments

I’ve worked closely with Legal, Privacy, Procurement, Engineering, and Security teams to evaluate third-party risks, review security and data protection clauses, to ensure compliance alignment with frameworks best practices such as (e.g., ISO 27001, NIST, CIS, CSA CCM, , MITRE ATT&CK, CAPEC, CWE).

In addition to my work with these frameworks and concepts I have also gained experience integrating security controls into DevSecOps, and cloud environments using tools such as; Fortify, Veracode, Snyk, Checkmarx, SonarQube, integrating to Jenkins, GitHub Actions, Prisma Cloud, and Sentinel.
I am interested in develop and implement ISMS governance and cloud security implementations.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Specialist

Current

Praxis IT

Feb 2024 - Present (2 years 8 months)

Collaborated with legal, privacy, and engineering teams to assess and mitigate security risks in vendor ecosystems, leading third-party risk management activities including onboarding, annual reviews, and risk assessments. Developed audit-ready compliance evidence for SOC 2, ISO 27001, and customer security requirements while tracking risks, control gaps, and remediation closure.

Third Party Risk Management ISO 27001 Security Risk Assessment Security Evidence And Audit Support

Security Analyst (GRC)

TCS

Mar 2018 - Jan 2024 (5 years 10 months)

Performed IT and information security audits across regulated environments, evaluating IT general controls, application controls, and information security controls for compliance with financial regulatory and internal policies. Assessed technology and security risks using ISO 27001, documented audit findings with remediation recommendations, and tracked corrective actions to timely closure.

IT General Controls Security Audits ISO 27001 Access Management Change Management Audit Reporting