Looking for a job

Vimal Raju

@vimalraju

Message

I strengthen enterprise security through vulnerability management, Microsoft security, and WAF operations.

India

Message

What I'm looking for

I'm looking to strengthen enterprise security through vulnerability management, Microsoft security tooling, identity governance, WAF operations, and risk-focused remediation work.

At EY GDS, I assess ISO 27001:2022 control maturity across areas including SIEM monitoring, cryptography, access control, vulnerability management, vendor risk, and compliance. I use CMMI-based scoring to identify gaps and document practical findings from client workshops.

Previously at 10xDS, I managed vulnerability and patch lifecycles, Microsoft Intune and Defender tooling, Entra ID access controls, and WAF solutions for banking, IT, and healthcare clients. I turn Nessus, Rapid7, Nmap, and Burp Suite findings into risk-prioritized remediation plans, executive reporting, and stronger endpoint, identity, and application security.

Experience

Work history, roles, and key accomplishments

Current

Senior Technology Consultant

Current

EY GDS

Sep 2025 - Present (1 year)

Serving as an ISO 27001:2022 maturity assessor on a multi-session client engagement, evaluating control domains including SIEM/log monitoring, cryptography, access control, HR, physical security, vulnerability management, vendor risk, and legal/regulatory compliance. Applying CMMI-based scoring to benchmark control maturity against ISO 27001:2022 requirements.