Murali Krishna Bondiga

WORK HISTORY

EDUCATION

ABOUT MURALI KRISHNA BONDIGA

Innovative and hands-on Cyber Security and Information Technology engineering leader with over 24 years of experience delivering in the digital technology space. Proven ability to lead various functions of cyber security program like cyber security architecture and engineering, risk assessment, vulnerability management, data and network protection, application security, incident handling, cyber security metrics and awareness. Experience in collaborating with various cyber security functions like governance, compliance, MDR and audit.Experience in leading high performing cyber security architects who are globally distributed. Results-oriented and outcome-driven leadership styleStrategic and tactical leadershipProgram management and roadmap planningAgile and nimble - Delivery focused Ability to set end-vision and goals but deliver incrementallyHire high performing talent and mentorStrong interpersonal skills and establish strong formal and informal relationships Motivational leadershipExcellent presentation and communication skills Cyber security architecture and engineeringSecure coding standards - OWASP TOP 10Risk assessment and management (NIST 800-39, 37 and 30)Qualitative, Quantitative, Semi-Quantitative and FAIRSecure Development Life Cycle (SDLC)Cyber security Principles, Policies, Standards, Guidelines and ProceduresNIST 800-53 Rev4 and CIS controls frameworksNIST CSF program frameworkISO 27001/2/5/17ITIL, COBIT and SABSA frameworksThreat modelingIdentify threat mitigation cyber security controls based on threat vectorsMITRE ATT & CK frameworkData classification Cloud SecurityApplication SecurityNetwork SecurityPaloAlto Next Gen firewallWeb Application Firewall (WAF)DDoS for cloudVulnerability Management MDR (Managed Detection and Response) or SIEM or SOCCompliance - PII, GDPR, PCI-DSS, HIPPA, EC LRC, EC LRS, CUI/CDI, MARS‐ECyber awareness training programIdentity and Access managementChina Cyber law China MLPS 2.0China ICP and Public security filingsCollaborate with legal counsel and cyber lawyersFamiliarity with DFARS cyber security clauses and FedRAMPSecurity implementation for Export Control complianceCryptographyAuthentication and Authorization - oAuth 2.0 and OpenID ConnectSSO - SAML FederationStatic and Dynamic scanningCollaborate with Pen testing teamsSecure DevOpsAudit supportFamiliar with ISO/Soc2 Type 2 certification Hiring and mentoring cyber security architectsData PrivacyBlockchain securityBusiness ContinuityDisaster RecoveryCyber Security Maturity Model Certification (CMMC)