Open to opportunities

Vennila Sivanesan

@vennilasivanesan

Message

Results-driven Information Security professional with over 10 years experience.

India

Message

What I'm looking for

I am looking for a role that values strategic security initiatives and fosters a culture of compliance and risk management.

I am a results-driven Information Security professional with over 10 years of experience in spearheading IT Governance, Risk Management, and Compliance initiatives. I am known for shaping decisions through strategic partnerships and leading global compliance monitoring. My expertise lies in managing cross-functional programs and negotiating priorities while implementing robust security frameworks.

Throughout my career, I have fostered strong relationships with C-suite executives and internal stakeholders, ensuring alignment with regulatory and operational goals. My recent role as a Senior GRC Analyst at Kaplan North America involved developing and maintaining organization-wide IT security policies, managing comprehensive Information Security Programs, and acting as the primary liaison for external IT audits.

I am passionate about driving security awareness within organizations and have successfully designed and executed enterprise-wide phishing simulations and training programs. My goal is to continue leveraging my skills in risk management and compliance to enhance organizational security postures and contribute to strategic initiatives.

Experience

Work history, roles, and key accomplishments

Current

Senior GRC Analyst

Current

Kaplan North America

Jan 2023 - Present (2 years 5 months)

Spearheaded the development, implementation, and maintenance of organization-wide IT security policies, procedures, and SOPs to reduce enterprise risks and ensure alignment with business objectives. Managed a comprehensive Information Security Program, ensuring strict adherence to industry standards and regulatory requirements such as NIST 800-53, CIS Top 18, ISO 27000 series, SOX, PCI DSS, GDPR,

Enterprise Risk Management Compliance Monitoring ServiceNow

GRC Analyst

Kaplan North America

Jan 2022 - Present (3 years 5 months)

Designed and executed enterprise-wide phishing simulation exercises and security awareness training programs, establishing and monitoring key risk indicators (KRIs) to cultivate a security-conscious organizational culture. Spearheaded vulnerability management processes by coordinating regular formal assessments, facilitating comprehensive Business Impact Analysis (BIA), and delivering actionable r

Security Awareness Vulnerability Management Business Impact Analysis (BIA)Regulatory Compliance ServiceNow

Senior InfoSec Admin

Citibank

Jan 2021 - Present (4 years 5 months)

Managed all key performance indicators (KPIs) including compliance service level objectives (SLOs), turnaround time, and customer satisfaction scores, as well as key risk indicators (KRIs) ensuring all metrics remained within designated thresholds. Developed and implemented automated scan rules as a Segregation of Duties (SoD) Auditor to proactively detect deficiencies and trigger alerts for 150 a

KPIs KRI Monitoring Entitlements Review Business Continuity Disaster Recovery CRM Jira

InfoSec Admin

Citibank

Jan 2018 - Present (7 years 5 months)

Provisioned user, functional, and BOT ID entitlements along with processing compliance review requests, while identifying and implementing process improvement opportunities. Managed the complete lifecycle for user, functional, service, and BOT IDs by provisioning, reviewing, and deprovisioning entitlements to ensure SOX compliance.

User Provisioning Entitlement Management Compliance Process Improvement SOX Compliance Jira

Senior Process Associate

Amazon.inc

Jan 2014 - Present (11 years 5 months)

Responsible for pricing & business analysis of the US marketplace, competitor monitoring and research, benchmarking, and quality assurance. Managed a team of 32 analysts driving business deliverables and mentoring.

Pricing Analysis Business Analysis Competitor Research Market Research Benchmarking Quality Assurance Team Management Mentoring Data Analysis

Education

Degrees, certifications, and relevant coursework

Amrita Viswa Vidyapeetham

Bachelor of Technology, Computer Science and Engineering

Studied Computer Science and Engineering at Amrita Viswa Vidyapeetham, Coimbatore. The curriculum focused on foundational computer science principles and engineering applications.