Rama Gowda

About Rama Gowda

IT professional with over 25 years of broad-based experience in Cyber Security, Privacy and Defense, Project/Program Management, IT Auditing, Software Data/Network/Applications Architecture, Product Life Cycle Data Management, Configuration Management, Application Development and Implementation with big & small startup companies. Led the development of worldwide enterprise Data Management architectures, database modeling, design and administration. Experienced in Management, Static/Dynamic/Pen testing, Disaster Recovery Planning, Cloud Computing, Governance Risk Compliance (GRC), Data analytics via ACL, SOX, COSO, COBIT, Earned Value Management (EVM), Web architectures and technologies, Six Sigma methodologies & DOE, system performance tuning and production platform performance metrics. Systems analysis in the cloud, client-server application design, and n-tier applications. Demonstrated ability to learn quickly, understand business, technical subjects and issues. Lead cross-organizational teams and directly interfacing with the customers. Certified in SANS GIAC GWEB, Risk Management Assurance (CRMA) from Institute of Internal Auditors (IIA) and ITPM from George Washington Business School. An active member of OWASP, IIA and ISACA. Extensive leadership work experience at Microsoft, IBM, Airbnb, KPMG (Big 4 Consulting Co), Boeing, Ford, Mercedes Benz (Germany), Groupe Schneider (France), Hewlett Packard, US Army, US Navy and the NASA centers.

Experience

1. Senior Program Manager Architect Engineer - Security and Privacy - Vendor Risk Management

   Airbnb

   Oct 2021 — Present

   Managing assessment and remediation of individual third parties with respect to Security and Privacy controls to be in compliance with SOC2, FedRAMP, FISMA, NERC CIP, NIST CSF, CMMC, HIPAA, PCI, GDPR, ISO 2700x, CCPA, CCA, etc.• Evaluating security architectures, threat modelling, characterizing, and providing mitigation recommendations to address potential risks posed by Airbnb vendors in the Identity & Access, Networks, Devices, Data, Applications, Clouds, Cryptography, Vulnerability Management and Incident Detection and Response space.• Regularly assessing risks and opportunities; understand best practices, drive for process improvements, and find new ways of operating, balancing risk with efficiency and scalability. Interacting with Product owners, Legal and IT Security & Privacy teams.• Evaluating both on the Cloud (AWS, Azure, GCP) and on-prem SAST( manual and automated code reviews in C, C++, Java, JSP, NodeJS, SQL, etc), DAST, Penetration reports, Bug bounty programs, Red Team operations, Security architecture and risk mitigation for enterprise networks or services, Data analytics, BCP/Disaster Recovery, Product/Service definition, IAM, PLM, SDLC, Checkpoint/ Zscaler WAF tools, Imperva/McAfee and Guardium Database Activity Monitoring tools, Tenable/Nessus etc.• Analyzing gaps, preparing projects and presenting program reports using data analytics tools such as Tableau• Driving planning and strategy efforts• Educating internal businesses on the risk presented by vendors

Education

• Bangalore University

  Bachelor of Engineering (BE), Engineering

  1983 — 1987

• Villanova University

  Master of Engineering, CAD/CAM/CAE

  1988 — 1990

• The George Washington University School of Business

  Masters in Information Technology Project Management, Project/Program/Risk/Quality Management

  2002 — 2003

Skills

• Project Management
• Big Data Analytics
• Cyber-Security
• System Engineering
• Team Center Enterprise
• Boeing
• Programming
• Ford Motor Company
• Full Sdlc
• Web Development
• Mechanical Engineering
• Agile & Waterfall Methodologies
• Security
• Enterprise Software
• Lean Six Sigma
• Analysis
• Plm - Product Life Cycle Management
• Management
• Object-Oriented Programming (Oop)
• Program Management
• Automotive
• Risk Manager
• Enovia
• Oracle
• Requirements Analysis
• Manufacturing
• Sap
• Integration
• Aerospace
• Networking
• Databases