Arava Anantha Rao

About Arava Anantha Rao

Information Security & GRC Specialist | Risk & Compliance Leader | Information Security Manager at TCSExpert in implementing security frameworks and driving risk mitigation strategies across corporate environments. Focused on Governance, Risk, and Compliance (GRC), I ensure proactive security measures to protect business-critical assets and maintain regulatory alignment.Key Specializations: Risk Management & Threat MitigationLed risk identification, baseline control checks, and IT risk assessments for multiple units.Managed risk registers and ensured timely closure of NCRs.Performed incident analysis and implemented process improvements across units. Enterprise Security OversightReviewed and assessed over change requests, reducing potential breach risks.Conducted hardening checklist reviews for Windows and server environments.Supported audit readiness and control validations through HOTO activities and physical security walkthroughs. Audit, Compliance & Change ManagementEnsured compliance with internal and external requirements across multiple business functions.Updated processes, tested control effectiveness, and recommended remediation strategies. Security Awareness & Strategic LeadershipSpearheaded the annual InfoSec Fest with participants.Delivered security awareness sessions to over associates.Collaborated with leadership to present incident trends, risk dashboards, and compliance posture at Branch Security Committee meetings.Certified in Azure Security (AZ-500, AI-900, AZ-900, SC-900) and ISO/IEC 27001:2022 Lead Auditor, I bring a structured, compliance-driven, and proactive approach to cybersecurity, ensuring organizational resilience against evolving threats.

Experience

1. Information Security Manager

   Tata Consultancy Services

   Sep 2023 — Present · Hyderabad, IN

   Led and participated in risk identification, baseline control checks, and audit readiness across multiple business functions, ensuring compliance with internal and external requirements. Managed risk registers for 10+ units, conducted detailed IT risk assessments, and ensured timely NCR closures. Reviewed and assessed over change requests, improving adherence to security policies and reducing potential breach risks. Supported audit readiness and control validations for new infrastructure setups through HOTO activities and physical security walkthroughs. Conducted hardening checklist reviews for Windows and server environments, enhancing configuration compliance across corporate systems. Spearheaded the annual InfoSecurity Fest, engaging over participants, and delivered security awareness sessions to more than associates. Collaborated with leadership to organize and present insights at Branch Security Committee (BSC) meetings, sharing incident trends, risk dashboards, and compliance posture. Performed incident analysis, implemented process improvements, and aligned policies across multiple units. Identified and assessed key controls across multiple units, updated processes, conducted effectiveness testing, and recommended remediation strategies to ensure compliance with internal policies.

Education

• Gayatri Vidya Parishad College of Engineering (Autonomous)

  Master of Computer Applications - MCA

  2021 — 2023