Arul Manickam

About Arul Manickam

Arul is a Senior Manager with Deloitte’s Cyber Risk Services practice, delivering solutions to address the client’s cybersecurity challenges. He has an overall professional industry experience of 15 years focused principally on the Public Sector and Financial Services Industry. His experiences vary in nature from engagements in Security Management, Vulnerability & Penetration Testing, Application Security & Architecture assessments, Third-Party Cyber Risk Management, eGRC, Business resilience to regulatory compliance management. He specializes in performing NIST CSF, NIST 800-53, FedRAMP, MARS-e 2.0 assessments, and control effectiveness analysis. He has worked on several end-to-end strategy & implementation engagements in Common Control Frameworks, Risk assessments, and Deloitte’s Cyber Security Framework (CSF) related engagements. He has performed several onsite information security assessments & regulatory compliance assessments for clients & their third parties. Arul specializes in performing CMS compliance activities and risk assessments for US state clients like the Information Security Risk Assessment (ISRA), Privacy Impact Assessment (PIA), System Security Plan (SSP), Plan of Action & Milestones (POAM), Security Assessment Report (SAR) and Self-Attestation (SA).Arul has worked on several cyber strategy & roadmap engagements. He has conducted gap assessments and onsite/remote information security & business continuity assessments (on behalf of clients) on third-party vendors/suppliers. The assessment requirements were driven by regulatory, legal requirements & internal drivers based on the industry of the client. He has worked on designing several information security policies, standards, crisis management, business continuity & disaster recovery plans. He has drafted several security questionnaires, control requirements (design & operating effectiveness requirements) for risk statements for clients.He has lead engagements in creating & refreshing client frameworks based on Deloitte’s integrated requirements (IR) library, Deloitte’s CSF and several standards like General Data Protection Regulation (GDPR), Sarbanes-Oxley Act (SOX), ISO 27001, Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance Portability and Accountability Act (HIPAA), National Institute of Standards and Technology (NIST) 800-53, NIST CSF, COBIT, BS ISO 22301. He has implemented several common control platforms (CCP) & Integrated control framework (ICF) for clients.

Experience

1. Senior Manager

   Deloitte

   May 2011 — Present · Portland, OR, US

Education

• Anna University Chennai

  Bachelor of Engineering - BE, Mechanical Engineering

  2003 — 2007

• Indian Institute of Management, Indore

  Post Graduate Diploma in Management, Business/Commerce, General

  2009 — 2011

• St.Michael's Academy

  Science

  1991 — 2003

Skills

• Risk Management Framework
• Technology Risk
• User Experience Design
• User Experience
• Risk Management
• Team Management
• User Interface Programming
• Marketing Strategy
• Information Security Management
• Csf
• Third Party Vendor Management
• Management Consulting
• Mortgage Banking
• Business Continuity Planning
• Business Analysis
• Solution Architecture
• Analytics
• Photoshop
• Physical Security
• Management
• Archer
• Project Management Office (Pmo)
• Software Project Management
• Iso Standards
• Business Intelligence
• Project Management
• Security Management
• Risk Assessment
• Risk Frameworks
• Requirements Analysis
• Vendor Audit
• C
• Business Continuity
• Cyber-Security
• Nist 800-53
• Graphic Design
• Process Management
• Java
• User Interface
• Change Management