Swetha Kondur

– Implemented ISO 27001 framework – Achieved 15 successful access recertifications – Established and managed Risk Register – Maintained comprehensive Asset Inventory

– Currently working on the CRA and EUCC Mapping and Risk assessments linked with IoT both Physical and Business Threat-Solutions – Developing a solution for the Risk analysis for the CRA Common criteria.

– Improved and managed multiple Jira projects. – Maintained a SOC2 Type II ISMS with zero observations across all trust service criteria. – Managed Quorum teams for Ledger Vault using MISC and supported smart contract workflows. – Contributed to ISO 27001 and ISO 22301 initiatives. – Drove security awareness, risk assessments (incl. TPRM), and policy development. – Led Internal Audit activities. – Worked with cross-functional teams to strengthen onboarding/offboarding, access management, BCP, SDLC, and incident management. – Oversaw GRC functions: risk management, action plan tracking, compliance, and ISMS operations.

– Worked on making the security and to bring subsidiaries compliant with Heppner Group Policy – Close all topics regarding gap analysis and risk assessment – Take the control of security tooling: Crowdstrike, Proofpoint, Imperva, Rapid 7 and Fortinet – Improve the security governance with the CISO – Worked with the Network security Engineer closely with various topics related to fire-walling and network diagrams. – Managed an external and internal Audit.

– Managed the BitSight security score program for Société Générale. – Performed Identity Access Reviews using SG tools and Office 365 Power Apps. – Handled risk assessment forms and month-end internal audits for access reviews. – Created phishing campaigns and promoted cybersecurity and compliance awareness across SG and the ALD group.