0% found this document useful (0 votes)
15 views3 pages

Shaheer Mohammed GRC Consultant Bangalore 11years

Shaheer Mohammed Puthanveettl is an IT Security professional with extensive experience in risk management, information security, and compliance. He holds a B.Sc. degree and several certifications, including ISO 27001 Lead Auditor and Certified Ethical Hacker. His professional experience includes roles at IBM and Accenture, focusing on information security governance, risk assessments, and compliance with various standards.

Uploaded by

jagdishwl31
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
15 views3 pages

Shaheer Mohammed GRC Consultant Bangalore 11years

Shaheer Mohammed Puthanveettl is an IT Security professional with extensive experience in risk management, information security, and compliance. He holds a B.Sc. degree and several certifications, including ISO 27001 Lead Auditor and Certified Ethical Hacker. His professional experience includes roles at IBM and Accenture, focusing on information security governance, risk assessments, and compliance with various standards.

Uploaded by

jagdishwl31
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 3

SHAHEER MOHAMMED PUTHANVEETTL

+91-7406998264, [email protected]
II FLOOR, ARADHANA NILAYAM
OPP TO SAI LEELA APARTMENT, SAI COLONY
BELATHUR, KADUGODI,BANGALORE – 560067
KARNATAKA, INDIA
______________________________________________________________________________________________
SUMMARY:

An IT Security professional with functional experience in the areas of risk management, information security, data
privacy, vulnerability management, firewalls, security auditing, governance & compliance, operations management.

EDUCATION:
 Graduation in B.sc from Andhra University, Visakhapatnam
 Intermediate from Board of Intermediate Education, Visakhapatnam
 SSC from Board of Secondary Education, Visakhapatnam

TECHNICAL QUALIFICATION:
Applications : Microsoft Exchange, Citrix, Lotus Notes
Security Tools : Retina Scanner, Snort, NMAP, Nessus, Burp Suite, Wireshark
CRM Tools : GRC Archer, Parature, BMC Remedy 7.5, Service Center
Standards : ISO 27001, PCI DSS, HIPAA, SOX
Governance Tools : RSA GRC Archer

CERTIFICATIONS:

 Certified ISO 27001:2013 Lead Auditor (ISMS)


 Certified Ethical Hacker (CEH) from EC-Council
 ITIL v3

PROFESSIONAL EXPERIENCE:

I. IBM INDIA PVT. LTD, BANGALORE, INDIA


Advisory Consultant – Information Security (09th Jul 2015 – Till date)

 Direct the information security focus of the Account’s health insurance business within the region,
maintaining the strategy and plans for delivering the appropriate levels of security
 Ensure that contractual requirements for security are satisfied and that opportunities to improve security are
identified
 Coordinate with the Legal Counsel team on all business related requirements and exceptions and provide
solutions compliant with contractual agreements
 Work with the application development and engineering teams and build security into the environment
 Ensure that comprehensive documented security processes are implemented
 Perform security review and acceptance testing for all the applicable projects
 Ensure compliance to HIPAA, ISMS, PCI DSS and IBM Data security policies
 Identify the security requirements and recommend solutions to the clients. Some of the solutions implemented
were Symantec VIP, CyberArk
 Perform audits to check compliance against legal and regulatory controls and standards
 Provide appropriate mitigation controls for all the active list of risks and ensure continuous implementation
 Review the risks and potential security findings monthly with the CISO
 Ensure the findings of the vulnerability assessments are followed up with the respective projects and the
findings closed within the timelines as applicable to the severity levels
 Provide support for Change Control process by reviewing Change Requests for security implications where
applicable
 Lead investigations in the eventuality of security incidents within the region

II. ACCENTURE, BANGALORE, INDIA


Information Security Lead – Governance, Risk & Compliance (31st May 2012 – 06th Jul 2015)

 Delivers information security risk assessments (Certification and Accreditation) of projects, new technologies,
external service providers, and IT changes. Guides staff and managers on the appropriate risk mitigation
strategies
 Conduct internal audits as per the IT Control framework
 Managed the security program for major health insurance clients and ensured compliance to HIPAA and client
security policies
 Provided consulting services to banking clients and ensure compliance to SOX across all delivery centers
 Work with the Technology Standards team in building policies and standards for all applicable technologies
and technology devices like workstation, server security, FTP, DHCP, Auditing & Logging, Infrastructure
Security, Remote access, Encryption Security and many more
 Perform audits and reviews as per the standards – ISO 27001, PCI DSS and SOX
 Coordinate the Business Continuity planning activities across the line of business
 Review the Metrics and Dashboard for Information Security - Strategy and Policy
 Responsible for ensuring penetration testing and vulnerability assessments are carried out as per the plan
rolled out for the respective projects
 As an advocate of information security, works closely and proactively with IT project team leaders, service
providers, and business units to provide security-related technical solutions. Identifies opportunities to
improve business practices or IT security-related processes
 Manage various operations part of the Accenture SOC team and ensure response timelines are met across all
the verticals in the Organization
 Work with the Client Data Protection team to ensure appropriate controls are in place to meet the data privacy
requirements
 Prioritizes, monitors, and assesses compliance and audit recommendation results to ensure they are
comprehensive, robust, and of high quality
 Coordinate with other delivery centers and stakeholders for joint delivery of security services
 Ensure project deliveries within specified timelines
 Ensure deliverables are completed and signed off
 Contribute broad and deep knowledge in Information Security across a broad operational framework/range of
projects

III. KNOAH SOLUTIONS PVT. LTD, HYDERABAD, INDIA


Assistant Manager – Compliance & Operations (09th Aug 2010 – 29th May 2012)

 Implemented ISO 27001 across multiple functions, for both internal and client facing accounts
 Built policies and standards in line with the Organization and Client security requirements
 Conducting gap analysis, risk assessments to identify vulnerabilities
 Represent the Internal Security Auditors group. Ensure the Organization and the specific client projects are
compliant to the security policies as per ISO 27001, PCI DSS
 Conduct Security Audits to identify weaknesses in the implemented system and plan for remedial actions
 Performing Network Vulnerability Assessments and review findings with the Clients and implement solutions
including policy remediation and selection
 Member of the Internal Security Auditors group. Ensure the Organization is compliant to the security policies
as per ISO 27001
 Represent the Security function in the Change Advisory Board
 Assist in Business Continuity Planning and Implementation
 Single point of contact for all the Client Interactions and Partner Performance Reviews
 Conducting Security Awareness Training to new hires
 Coordinate with the support teams to ensure smooth functions across Operations
 Ensure the optimum utilization of the available manpower to meet the staffing
 Share the NC & Observations with the respective stakeholders and build preventive measures
 Conduct Performance and Annual Appraisals for the Team Leads and Supervisors
IV. UNISYS GLOBAL SERVICES INDIA, HYDERABAD, INDIA
SSR2 – Application Support (01st June 2009 – 03rd August 2010)

 Work directly with the Client IT to ensure the required infrastructure needs are met
 Ensure the patches and the antivirus definitions of all the workstations are updated as per the timelines. Also
to ensure Workstations and Servers are hardened as per the security requirements and are kept in compliance
to the company standards
 Ensure Access Control Logs are implemented across all support functions and are audited in a periodic
manner
 Service Desk Incident Management and Reporting
 POC for the incidents escalated by the Level 1 team and the web incidents submitted
 Ensure that the team makes a follow up on all the pending incidents and report the trends to the offshore team
on a daily basis
 Coordinate and work with the location IT team to understand the root cause of a problem and help in building
a permanent solution to the problem

V. KNOAH SOLUTIONS PVT LTD., HYDERABAD, INDIA


Senior Team Leader – Network Operations Center (5th Sep 2005 – 14th May 2009)

 Lead a team of network engineers to perform the server updates and maintenance activities on client
infrastructure
 In case of any network downtime, coordinate with the respective support functions at the Client end and
ensure the service is restored in the least possible time
 Ensure the updates are rolled out to the identified servers in a timely manner
 Responsible for maintaining the change control process
 Coaching the team members on a weekly basis and set them new targets and action plans while monitor them
closely on a daily basis
 Represent Knoah for all Client Interactions related to Operations Performance, Business Strategy, Network
Downtime and Vendor Management

PASSPORT DETAILS:
Passport Number : M1609765
Place of Issue : Bangalore, India
Date of Issue : 27th Aug 2014
Date of Expiry : 26th Aug 2024

PERSONAL DETAILS:
Father’s Name : C. P. MEERAN KOYA
DOB : 30-08-1985
Nationality : Indian
Religion : Islam
Marital Status : Married
Languages Known : English, Hindi, Malayalam and Telugu
Permanent Address : S/O C.P.MEERAN KOYA
ENGATTIL HOUSE
MURUKALLINGAL
(PO) CHALIYAM, CALICUT
KERALA – 673301, INDIA

(SHAHEER MOHAMMED PUTHANVEETTL)

You might also like