Sandhya Gajula

Background

About Sandhya Gajula

Over 15+ years of extensive IT & Information Security experience in conducting management system audits for Information Security, IT Risk management, Web Application & Database security assessments, VAPT. Experience with control framework covering the multiple standards(ISO27001), regulatory, compliance and framework requirements (COBIT). Experience with control framework covering the multiple standards(ISO27001), regulatory, compliance and framework requirements (COBIT). Experience in developing risk management strategies, Performing risk Assessments, Risk mitigation's and Risk Management end to end for organizations including people, process and technology. Handled multiple customer engagements with particular focus on IT risk assessment, compliance and application security. Hands on with SOX, ISO 27001 audit preparation tasks including TOD, TOE of IT controls (IAM/CHM/PFS/SMO Controls). Managed end-to-end Risk Management activities including Risk Assessments, Internal control reviews, Risk Monitoring and Reporting activities. Reviewing IT controls and performing gap analysis. Perform technical risk assessment of web applications and Databases using automated tools like NGS, AppSentry and Web Inspect for various clients during various engagements. Perform risk assessment of applications and identifying the mitigation controls for the risks. Creating risk assessment report along with the mitigation controls for identified security vulnerabilities. Hands on with Data Security (DLP) and Cloud Security (Email/Cloud Proxy/CASB). Qualitative experience of handling, managing & delivering multiple development projects to suit the client's requirements. Planning and scheduling project activities; overseeing the execution & delivery of project deliverables.