Valugonda Sravan Kumar

About Valugonda Sravan Kumar

I am a Compliance Analyst having 2+ years of experience in building robust and resilient compliance frameworks. In today\'s complex regulatory landscape, my focus is on translating intricate compliance mandates into actionable and effective organizational strategies that protect both the business and its stakeholders.My core expertise centers on the synergistic application of global standards and evolving data protection laws:Global Privacy Mastery: Expertly navigating and implementing the requirements of the General Data Protection Regulation (GDPR) and the emerging Indian Digital Personal Data Protection Act (DPDPA) to ensure data subjects\' rights and organizational accountability are upheld.Security Frameworks: Driving maturity and certification readiness for the ISO/IEC 27001 (Information Security Management System - ISMS) and ISO/IEC 27701 (Privacy Information Management System - PIMS) standards. I focus on developing, documenting, and maintaining controls that align with both security and privacy objectives.Proactive Risk Management: Specializing in comprehensive Risk Assessment methodologies—from technical vulnerabilities to strategic enterprise risks. A key component of my practice is Cloud Security, ensuring vendor and supply chain risk does not compromise the organization\'s security posture. I identify, analyze, and mitigate risks before they impact business operations.I thrive in collaborative environments, working cross-functionally with IT, Legal, and Business teams to embed a sustainable culture of compliance and risk awareness.Let\'s connect to discuss how to future-proof your organization\'s GRC and data privacy strategy.@ s••••••••@gmail.com

Experience

1. Compliance Analyst

   Centillion Networks Pvt Ltd

   Feb 2025 — Present · Hyderabad, IN

   Actively contributed to the initial implementation of ISO 27001:2022, including control identification, policy drafting, and gap assessments • Maintained an Excel-based Risk Register, ensuring risk owner assignment, mitigation plans, and follow-ups • Contributed to data privacy initiatives by supporting access control policies and secure data handling practices.• Conducted organization-wide annual risk assessments for IT infrastructure, HR processes, and project level security• Participated in user access reviews, onboarding/offboarding processes, and implementation of Access Control measures (A.9). • Maintained manual GRC dashboards using Excel, including task calendars, audit logs, and evidence inventories • Supported audit preparedness by aligning internal practices with external auditor checklists from Bureau Veritas. • Aided in configuring system-level controls, applying antivirus updates, and conducting vulnerability patching under Operations Security (A.12).• Ensured proper encryption protocols for sensitive data exchange (Cryptography – A.10).• Enforced Physical & Environmental Security measures by tracking hardware access and workstation policies (A.11). Reported and logged security incidents in accordance with Information Security Incident Management (A.16).• Contributed to Business Continuity planning and backup simulations, supporting contingency preparedness (A.17). • Verified that supplier agreements included necessary security clauses, conducted Third-party risk assessments, ensuring compliance with Supplier Relationship controls (A.15). • Supported secure email handling, endpoint monitoring, and internal communication protocols (Communications Security – A.13). • Participated in change management reviews, test validations, and user acceptance testing under System Acquisition & Development (A.14).• Collaborated with compliance and IT teams to ensure operational procedures remained aligned with the ISMS scope

Education

• Kamala Institute of Technology & Science

  Bachelor of Technology - BTech, Electrical and Electronics Engineering

  2018 — 2022