Rajnarayanan Puthumana

About Rajnarayanan Puthumana

With over 16 years of professional experience, I currently serve as Cyber Security Manager at Deloitte, specializing in delivering cyber risk services, including risk management, cyber certifications, and compliance management. My role involves reviewing IT controls and compliance, ensuring vulnerability management across systems, and collaborating with solution architects and product managers to implement appropriate security measures before application go-lives. Certified as an ISO 27001 Lead Auditor, I bring expertise in information security management, service management, and quality assurance. At Deloitte, I also oversee supplier compliance with ITGC controls and contractual security commitments while supporting the investigation and coordination of information security incidents alongside cyber response teams. My work reflects a commitment to fostering secure and compliant landscapes for enterprise operations.

Experience

1. Cyber Security Manager

   Deloitte

   Nov 2021 — Present

   Responsible for delivering cyber risk services, including Risk management, cyber certifications and compliance management- Review and ensure the IT Controls and compliance, Vulnerability across the landscape is secured- Work with solution architects, Product Managers and security and compliance focal to ensure the appropriate security controls are implemented, necessary legal and regulatory aspects assessed before the application go-live- Support in investigating and coordination of information security incidents in the landscape with cyber response teams- Govern/review the suppliers in relation to the ITGC control compliance and contractual commitments in relation to information security- Review the IT controls compliance in relation to SOX and other financial control requirements work with stakeholders to fix the control design and operating effectiveness gaps- Support in internal/external audits and ensure the necessary preparations and coordination during the audit period- Perform periodic risk assessments and risk reviews to ensure the operational application landscape is secured- Provide periodic updates on IT Controls compliance, Strategic initiatives, and continual improvements to senior leadership- As an escalation point related to IT control testing, Vulnerability, and transition, resolve ongoing operational issues in project transitions, control testing/audits and vulnerability remediations.Cyber Strategy and Risk Advisory- Client relationship management and business development- Managing client engagements related to information security, data privacy and technical security assessments- Engaging with various stakeholders to enable governance risk compliance, data privacy- Conduct periodic trainings including emerging technology risk assessments.

Education

• Board of Technical Education Kerala

  Diploma, Electronics

  2004 — 2007