Thilak Pandiyan

About Thilak Pandiyan

17+ years of enriched technical and successful professional assignments in IT Governance, Risk and Compliance with core competencies in Information Security programs such as Establishing Methodologies, Frameworks, Risk Management, Compliance & Audit and Business Continuity across several industriesEstablished Risk Management Methodologies and Frameworks aligning to best practices, compliance & regulatory requirementsPartner with Risk Management to establish and execute the Risk Management program like GLBA, HIPAA, SOX and PCI corresponding communication and strategies.Provides risk expertise while working with the business and other partners to proactively identify the risk exposure across the projects and bankPlanned and conducted IS audits and implemented on specific requirements with reference to frameworks/best practices such as CoBIT, ITIL, ISO 27001, ISO ISO 22301, CMMI, ISO 22301, NIST800-53, FIPS-199, NIST800-37, PCI DSS and PCI PED.Developed and helped in implementing Business Continuity Framework, Business Continuity Plans along with IT Disaster Recovery for various financial, manufacturing and BPO’s industries Pre-sales & Delivery Management with multinational direct and indirect reportsDeveloped a comprehensive IT Governance Framework and implemented in IT units of Banking & Financial Institutions Developed, implemented and reviewed RCSA ( Risk and Control Self Assessment Framework ) for Banking and Financial Institutions

Experience

1. Director - Cyber Security & Privacy

   PwC

   Jan 2023 — Present

Education

• VIT

  Bachelor of Engineering (B.E.), Information Technology

• Anna University Chennai

  Master of Engineering, Industrial Engg & Mgnt

  2004 — 2006

Skills

• Information Security Management
• Pci Dss
• Penetration Testing
• Itil
• Risk Management
• Bs25999
• IT Audit
• Vulnerability Management
• Governance Tools Like Rsa Archer and Modulo
• Data Governance
• Hipaa
• Information Security
• Cobit
• Security
• Business Continuity Planning
• Iso 27001
• Operational Risk Management
• Dlp/Drm
• Information Technology
• Byod
• Risk Assessment