Srinivas Yerukala

Background

About Srinivas Yerukala

I have more than 14 years of experience as a security professional, and I am results-oriented and perceptive. My areas of expertise include GRC, IT Risk Management, security audits, NIST, PCI Compliance, IT controls, cloud security, Vulnerability Management Security, Infra Security and cyber security. I have worked in a variety of industries during my career, including manufacturing, IT services, and oil and gas industry. Experienced to secure and optimize DevOps environments for continuous compliance and proactive threat mitigation. Maintained robust security postures by implementing policies, procedures, and controls aligned with NIST and FISMA. My expertise extends to vulnerability management, penetration testing, and incident response, ensuring swift resolution and minimal downtime. I leverage my proficiency in cloud tools like SalesForce, ServiceNow, and Oracle EBS to seamlessly integrate security with diverse workflows. I'm passionate about security awareness and regularly conduct training programs for both end-users and IT personnel. I have performed Secure by Design Assessments for many applications as a Cyber Security Specialist to ensure their security clearance before to release. These evaluations examined topics like Hosting security, Network Security, Identity and Access management, and data security and privacy. I successfully reduced security risks and facilitated the completion of remediation by working with the application development, infrastructure, and helpdesk teams. Conducting internal reviews and assessments against compliance and privacy regulations is a part of my experience. I am well-versed in information security frameworks and standards like ISO 27001/2, and I have managed Client Data Protection/ISO 27001 programs from start to finish, including scope identification, validation, and internal assessments. Knowledgeable about evaluating compliance with PCI Data Security Standards (PCI DSS) and associated obligations. Competent in assessing controls, procedures, and systems to find compliance gaps and suggest corrective action. Skilled at conducting in-depth assessments, keeping track of results, and working with stakeholders to mitigate vulnerabilities and achieve PCI compliance. I am certified in ISO 27001:2013 Lead Implementer, ISO 22301:2019 CLIP for BCM, CompTIA Security+, and ITIL V3 Foundation. I also possess the Certificate of Cloud Security Knowledge (CCSK) V4. Additionally, I am certified as an AZ-500.