Jyothi Gullipalli

Senior Compliance Analyst @Tanama Software Private Limited

Bengaluru, IN

Implemented and monitored controls aligned with PCI DSS v4.0, SOC 2 Type II, and NIST Cybersecurity Framework.•Coordinated with internal and client-side stakeholders to collect and map evidence for 100+ compliance requirements.• Created traceable mappings between security policies, control frameworks, and audit checklists.•Conducted gap assessments for existing security controls; documented non-conformities and worked with engineering teams to implement remediations.•Contributed to the development of a Risk Register specific to payment systems, internal tools, and third-party SaaS applications.• Assisted in evaluating and mitigating risks related to third-party vendors handling customer data.•Supported the onboarding and periodic assessment of third-party vendors, ensuring alignment with compliance and security expectations.•Reviewed vendor SOC reports, SLAs, and data protection clauses for risk classification and contractual compliance.•Participated in due diligence checks and coordinated with vendors to address identified risks or gaps.•Worked with the IAM team to review user access rights, perform access certification audits, and ensure least privilege enforcement.• Participated in onboarding/offboarding processes to manage identity lifecycle and reduce insider threat risks.•Assisted in configuring MFA, SSO, and access control policies across internal tools and cloud services•Drafted and updated client-specific security policies in line with regulatory needs such as GLBA and CCPA (where applicable).•Ensured policy rollout and employee acknowledgment via internal policy portals.•Delivered monthly security training sessions to internal teams on PCI DSS scope reduction techniques, phishing awareness, and data handling best practices.•Created email simulation templates for periodic phishing campaigns and measured employee response rates.•Involved in incident response coordination, including detection, impact analysis, root cause identification.

Jawaharlal Nehru Technological University, Kakinada

Master's degree