Pranav Verma

Experience

• 

  Advent education Private Limited

  Jul 2017 - Jun 2018

  Management Trainee

  Client coordination, shortlisting of Foreign Universities for students.

• 

  SBI Card

  May 2022 - Jul 2024

  Assistant Manager

  GRC (Governance Risk Compliance)Information Security KRI (Key Risk Indicators)To prepare Monthly KRIs/KPIs for Information Security which includes multiple metrics from various domains like SOC, Brand Monitoring, CASB, DLP, IDAM / PAM, EUS (End User Security), SecOps and GRC.To analyze and report the non-compliant metrics for the month, and to track and drive those metrics’ status towards improvement and remediation of risks.Document LibraryTo create and revise documents. To maintain a Document Library of all InfoSec documents – Policies / Process/ Standards / Guidelines / SOPs / RunBooks.To track the aging of InfoSec Documents and ensure the revision and approval of documents to store only valid documents throughout the year.Information Security Risk IdentificationTo interact with InfoSec stakeholders and find emerging risks in the environment and the industry, and try to find the measures to provide security against developing threats.Risk RegisterTo find, analyze and record Information Security risks in the environment and test the effectiveness of the controls implemented.PCI-DSS (Payment Card Industry – Data Security Standard)To check the servers in the SBIC environment for the presence of Credit Card Numbers in plaintext and report and track those Servers / Locations / Applications / Databases towards remediation through Encryption and Redaction / other alternatives.RCSA (Risk Control Self-Assessment)To perform the RCSA activity in coordination with InfoSec stakeholders to revise the parameters such as Risk Rating and controls in contrast with evolving technologies/threats.Software Approvals / Mobile Sticker ApprovalsTo analyze individual’s software requirement and approve / reject on the basis of Application Security status / End Of Life / End Of Support.To approve Mobile Sticker to individuals basis their Business Justification for use in the premises, and to prohibit use of mobile in areas with sensitive customer information. Show less

• 

  ESec Forte® Technologies

  Aug 2024 - now

  Information Security Consultant