N Krishna Chaitanya

Heading Governance, Risk & Compliance of JSFB Information Security Systems and Risk.

General Manager Digital Engineering and Information Security risk in Fincare Unit Handling Security of Digital Engineering and IT Infra Security Departments. Handling Application Security, VAPT, Red Teaming, IS Audit, Application Security Audits, Vendor Security Risk Assessment (On-boarding), Secure Configuration, Regulatory Audits, SDLC, CI/CD,

1. RBI Cyber Security Framework (CSF), Digital Payment Security Controls (DPSC), IT GRC frameworks and Advisories of Banks and NBFC's etc., 2. Conducting audits in different banking technology domains such as Secure Configuration (Servers, DB, Middleware's, Network Security Devices, Endpoints), Vulnerability Assessment, Penetration Testing (Internal/External), Red Team Operations, Internet Proxy, Email Proxy, DLP, Change Management, Patch Management, Secure Mailing & Messaging Systems, VPN, Database Security, DAM, Forensics, Internet Banking, Mobile Banking, Tab Banking, MDM, Card Operations (Credit, Debit), ASLC, S-SDLC, API Security and IT GRC. 3. Support in maintaining audit checklist and documents, trend analysis, preparing presentations etc. 4. Conduct audits of information security systems and infrastructure to verify systems are secure and support the related applications/business processes. 5. Developing project plans, work programs, evaluating system controls, identify risks and audit gaps, documenting results in proper audit report format, making recommendations, and communicating information to stakeholders.

1. Application Security - Web & Mobile, API (Vulnerability Assessment & Penetration Testing) 2. Source Code Assessment - Java/ASP.Net/Kotlin/Angular Java/Gradle, Maven/PHP etc 3. Vulnerability Assessment - Endpoints, Servers & Network Devices (Firewall, Switches, Routers) 4. Public Facing IP Penetration Testing 5. SAP Application Security Assessment - Web App 6. ISO 27001/27002 ISMS, Risk Assessment, GAP Assessment, SOA, Stage 1 & Stage 2 Audit, Policies, Procedures, Process documentations 7. ITGC - Test of Design, Test of Effectiveness, Risk Control Matrix 8. Digital Forensic Investigation, Root Cause Analysis. 9. Log Analysis, Event Management, SIEM, Incident Response, Threat Analysis.

Red Team Assessment Threat Hunting Web Application Penetration Testing Forensics Investigation Malware Analysis

C|EH - Certified Ethical Hacker (Master), C|CISO - Certified Chief Information Security Officer

To Look after & promote Boardroom Training Courses, National & International Conference,Workshops (National/Regional) Planning and Organizing Boardroom training courses to Directors,Senior Management of Pvt/Public/Govt Companies. Coordinate with content team to design Training Material and Modules. To ensure that Training programs are conducted as per the calendar and ensure that effectiveness of Training programs. Create and maintain quality standards, policies, procedures, monitoring forms, and other quality or training related documentation. Coordination with Faculties, Trainers, Preparing Training calendar & Budgets for the entire financial year. Planning and Organizing IOD Workshops, One day seminar with support of Industries and Regional Associations etc. E-mail Marketing, Lead Generation, Cold Calls, and Data Research.

Aggregate of 75%

M.Sc. Electronics , 1st Year Completed