Shyam Muthiah

About Shyam Muthiah

Experienced IT Security Risk Professional with over seventeen years of experience in…

Experience

1. Principal Security Analyst

   System Soft Technologies

   Sep 2020 — Present

   Good understanding of Information security standards and IT frameworks for on-prem and Cloud. Identifying organizations current critical business functions. Identifying risk to each business functions and calculate risk for each business functions & categorize. Optimizing of current security solutions to ensure they address current security requirements. Developing and Implementing Identity and Access Management strategy, RBAC, SOD, SSO, Conditional Access, Compliance Manager, Data Classification, DLP, Policies. Cloud Security for Access Management, Data Protection, Data Governance, Monitoring and Safeguarding referring to NIST SP-800-210 Access Control guidelines, NIST SP 800-53 rev4/rev5, Security and Privacy Control, NIST SP800-37 rev2 Risk Management Framework, ISO-27001/2(ISMS), ISO/IEC-27017(Cloud Security), ISO-027018 (PII) guidelines. Wrote new security policies, standards & procedures, updated existing documents where possible. New Security technologies including participating in implementation of Proof of Concept (PoC) engagements with SIEM. Communicates security risks and solutions to organization and IT staffs as needed. Implementing & Overseeing SOC 2 Type1 & Type 2 end to end controls on on-prem and Cloud. Implementing & monitoring the ongoing Information security regulatory requirements (both technical and workflow based) Creating and maintaing internal and external third-party audits, facilitate and track audit-related processes, activities, tasks, and deliverables. Implementing end to end AWS Cloud Compliance for SOC2, FedRAMP \'NIST SP 800-53r4\'(Moderate) controls.