Adinarayana Surani

About Adinarayana Surani

I am a results-driven Information Security & Compliance Leader with 17+ years of experience delivering Identity Governance and Administration (IGA), Access Management, Policy and Procedure Management, Risk & Controls, Audit, and Regulatory Compliance (SOX, ISO 27001, HIPAA, ITGC). I bring deep expertise in SailPoint IdentityIQ, Okta, Microsoft Entra ID (Azure AD), Active Directory, and Privileged Access Management (PAM), with a strong focus on access lifecycle management, audit readiness, and risk mitigation. I have a proven track record of strengthening compliance posture, reducing access risks, and leading enterprise-scale IAM transformations across hybrid cloud environments. I specialise in end-to-end access lifecycle management (Joiner-Mover-Leaver), User Access Reviews (UAR), certification campaigns, and Privileged Access Management (PAM). Over the years, I have successfully led large-scale IAM operations, consistently improving audit outcomes, reducing access risks, and strengthening enterprise security posture. My work has directly contributed to: • Achieving 98% SLA compliance in quarterly access reviews and certification campaigns • Strengthening audit readiness and supporting internal and external audits • Driving remediation activities and compliance reporting aligned with regulatory requirements • Enhancing protection of sensitive data, including PHI, through HIPAA compliance initiatives I collaborate closely with cross-functional teams including Security, Risk, Audit, Compliance, and Business stakeholders to align IAM strategies with organizational governance and risk management objectives. Beyond operations, I focus on continuous improvement by identifying compliance gaps, mitigating risks, and implementing automation using DevSecOps practices. I leverage tools and technologies such as Terraform, Ansible, CI/CD pipelines, Python, and PL/SQL to streamline IAM processes and improve efficiency. My experience also includes: • Providing L3 support for IAM tools and managing incidents via ServiceNow, Jira, and PagerDuty • Conducting internal audits across access management, PAM, infrastructure security, and logging controls • Utilizing GRC platforms like RSA Archer for risk, policy, and control management • Contributing to Zero Trust initiatives and cloud security within Azure environments

Experience

1. Operations Risk and Compliance Manager

   Uber India Technology Private Limited

   Apr 2024 — Present · Bengaluru, IN

Education

• GIET College of Engineering, NH-5, Chaitanya Knowledge City, Rajahmundry, PIN -533296 (CC-6R)

  Engineering Degree, Computer Science & Engineering