AGSM @ UNSW Business School

ISACA

ISC2

University of Sydney

University of Madras

Anna University Chennai

Head of Information Security - Qantas Account at Telstra

Cyber Compliance Manger

Career Break

Full-time parenting

Cybersecurity Professional with a successful track record during my tenure at Deloitte, Where I spent 2 years and 6 months honing my expertise. Developed comprehensive cyber strategies to safeguard organisations against emerging threats, focusing on Essential Eight cybersecurity controls recommended by the Australia Cyber Security Centre. Led  Projects to conduct readiness assessments, and mitigate risks effectively, Skilled in providing expert consulting services to elevate client's cybersecurity posture.

Known for expertise in cyber maturity assessments, stakeholder engagement and team leadership. Employed Industry renowned frameworks  such as NIST, Essential Eight etc. to inform strategies and recommendations. Collaborated with clients across both Public and Private sectors.

Deloitte Australia

Senior Manager - Risk Advisory -Cyber

In my role overseeing end-to-end security services, I spearheaded efforts to enhance the cyber maturity of the services provided to our customer through team leadership, Security governance and continuous monitoring. Achieved required compliance through driving risk mitigation strategies and prirotising projects. My approach fosters a culture of proactive risk mitigation, ensuring operational continuity.

Telstra

Head of Information Security - Qantas

In my role as the leader of Information security and risk function, I embarked on a journey to elevate security reporting and ensure continuous compliance with Policies and Standards. Guided by a strategic vision, we implemented robust security controls to mitigate risks and safeguard our customer assets. 

Managing customer audits and participating in monthly leadership governance meetings to showcase progress were pivotal aspects of my responsibilities. I collaborated with a wider team to address the security gaps in a structured manner. I am proud to have been recognised for executing the Get to Green Plan, a testament of our teams dedication and hard work in achieving Green status for Risk & Security. 

#Security Governance# Cyber Risk Management# Managed Security Services #Security controls uplift # Compliance reporting

Head of Information Security - Westpac

As part of my responsibilities within Risk and compliance , I promoted transparency, and accountability  for our customers. I collaborated with diverse internal teams to lead governance meetings aimed at mitigating the identified risks.

Manager, IT Governance Risk & Compliance

Third Party Risk Assessment,Preparing reports for project stakeholders and management
Risk Assessment, Technical due diligence on projects,M&A and cloud hosting solutions
Vendor/Partner Assessments, due diligence on security capabilities
Drive a technical policy stance across different levels of design / architecture and support teams  Negotiate data security clauses on the contracts including MSA and subcontracts.
RSA Administration,Risk based approach on all assessments
Security Project Consultation,Review & Compliance
Liaise with legal team as and when required
Advise and Assistance on Information security related requests

Senior Security Consultant- Risk Advisory

Conduct security risk assessments of network security devices and perform changes on firewalls 
Facilitate audit and vulnerability analysis of the Alphawest customer networks, and advise appropriate mitigations. 
Monitor and respond network security control related security incidents
Develop and maintain operational process documents related to the maintenance of network security controls and their periodic reporting against compliance metrics. 
Perform periodic audits of Alphawest customers’ firewalls to ensure compliance against their security polices, and assess whether change control security authorisation steps were adhered during rule changes.
Liaise with vendors to acquire emergency fixes, testing teams to verify the effectiveness of those fixes, and oversee the implementation of those changes
Liaise with vendors and other technical teams at the time of incident and develop appropriate remediation plans

Alphawest

Technical Security Specialist

Configure, test and implement various vendor firewalls (Juniper, Cisco, etc), and IDP for Alphawest customers.
Provide ongoing support to firewalls in terms of management, maintenance and diagnostics, such as firewall changes, firewall upgrades.
Audit firewalls before transitioning them on to production or decommissioning them out of production.
Conduct Vulnerability Assessment of customer networks, and managed Cisco’s Access Control server (ACS) and RSA Token Management systems.
Design and implement Site-to-Site VPN on the customers infrastructure and develop various scripts for the process automation across security control points. 
Administer and complete account provisioning of authentication and access controls within the network security control devices.
Prepare quarterly VA reports for customers-owned servers and monthly attack reports based on the investigation of IDP alerts for the customer network.
Point of contact for handling customer escalations, investigation and resolution of security events / incidents.

Senior Security Analyst

Cisco

Security Analyst

Perform gap analysis and provided security advisory to enhance the customers’ infrastructure security based on the ISO 27001 standard.
Perform requirements gathering by carrying-out the network and business process assessment for customers.
Audit and implement ISMS for customers.
Enable the identification and assessment of security risks for customers, and assist them in the selection and implementation of controls.
Perform vulnerability assessments, review firewall rules and policies, and reviewed the configurations of ISA proxy server and Microsoft Exchange server.
Review and improve the policies and procedures for customers.
Provided security awareness training to employees and business heads, 
Perform Business impact Analysis (BIA) / BCP / DR activities as part of the implementation.

Vijay Balakrishnan