Subramaniam

Educational qualification: -
Bachelor of Engineering (Electronics and communication) from Madras University (1994-1998)

Additional qualification: -
Certified Information System Security Professional
Certified Ethical Hacker v9.
Lead Auditor – ISO27001
Exin Cloud Computing Certified
Prince 2 Practitioner
APMG Cloud Computing Certified
Lead Auditor – ISO27001
ITIL – Foundation
Yellow Belt – Six Sigma

Professional Experience: -
Total Experience: 18+ Years of experience as consultant and trainer.

Summary:
Oct 1998 – Sept 1999 – Hexaware Infosystems limited, Chennai
Sep 1999 – Jan 2001 – Hyundai Motor India, Chennai
Jan 2001 – Jul 2002 - Satyam Computers Services Limited, Chennai
Jul 2002 – Jul 2004 - Scope International (Standard chartered Bank), Chennai
Aug 2004 – Jun 2005 – IBM Global Services India Pvt Ltd, Bangalore
Jul 2005 – Feb 2010 – Wipro Technologies, Chennai (RAC, Bristol, United Kingdom)
SaaSWorks Technology Solutions Pvt Ltd. – April 2010 – January 2012

Primary Skills:
Consulting:
ISO27001, ISO22301, ISO20000, PCI DSS, HIPAA, OWASP
Training:
IT Security, Attacks ,Application Security , CISSP, CSSLP, CCSK, PCI DSS, HIPAA, ISO27001, OWASP, SANS,
CEH, Security+, Web Security, VAPT, Compliance, ISMS, Exin Cloud Computing, APMG Cloud Computing,
CSSLP.

Highlights:
1. Master Trainer for OWASP Top 10
2. Master Trainer for SANS Top 25
3. Master Trainer for Cloud Security, CCSK
4. Master Trainer for CISSP and CEH
5. Master Trainer for ISO27001, ISO22301 and ISO20000
6. Application Security
7. Attacks

ISO27001:
1. Sahara Petrochemicals, Jubai, KSA
2. National Information Centre, Riyadh, KSA
3. ARICS, Riyadh, KSA
4. Implementer of ISO27001 and CISO at Refer a Patient, UK

ISO20000:
1. Consultant and Implementer for ARICS, KSA for many of their clients

ISO22301
1. Consultant and Implementer for ARICS, KSA for many of their clients
PCI DSS:
 PCI DSS implementer at Piraeus Bank, Cairo.

Trainings:
 Trainer for Security incident Response and Management – United Nations, Valencia,
Spain
 Master Trainer for C-DAC’s Certificate in Information Security Management and Principles.
 Master trainer for OWASP Top ten and Secure coding principles
 Secure Software Development Lifecycle trainer for Dell, Bangalore
 Web Application Security trainer for Wells Fargo, Hyderabad
 Cloud Security Trainer for Cognizant Technology Solutions.
 CISSP Trainer for Akamai, Bangalore
 CISSP trainer for EMC2, Bangalore
 CISSP Trainer for HP, Bangalore
 CISSP and CEH trainer for Inflow Technologies.
 CSSLP Trainer for Accenture
 CISSP Trainer for Cognizant Technology Solutions, Chennai
 CISSP Trainer for EMC2, Bangalore
 CSSLP Trainer for Dell, Bangalore
 CEH Trainer for Inflow Technologies
 CEH Trainer for Simplilearn
 CEH trainer for Inflow Technologies
 CEH trainer for Microland
 Application Security
 CCSK Trainer for IBM, Bangalore
 CCSK Trainer for Bank of New York, Chennai
 Exin Cloud Computing trainer for Wipro Technologies, Mumbai
 Trainer for OWASP for iQuanti, Bangalore
 Network security Trainer for Ericsson.
 OWASP Trainer for Accenture, Bangalore
 Lead Auditor and Trainer for DNVJ for ISO27001, ISO9001 and ISO31000.
 HIPAA Trainer, implementer and auditor for clients of ec-first in India.
 Conducted HIPAA workshop for Computer Society of India
 CCSK trainer for Accenture and Infosys, through Simplilearn.
 Cloud Security Trainer for Computer Society of India, Bangalore
 Trainer for PCI DSS, HSBC, Pune.
 ISO27001, ISO22301 and ISO20000 LI trainer for DNV, Bangalore.
 Cloud Computing Trainer for Simplilearn for corporate and public batches.
 Speaker on ‘Cloud Security and Auditing’ at DNV GL Annual Conference, Hyderabad, 2015.
 Consultant for DNV GL on Cloud Security, ISO27001, ISO22301 and ISO20000
 Lead Auditor and Trainer for ODC, for ISO27001, ISO22301 and ISO20000.
 CCSK, CISSP, OWASP and CEH Trainer for Infosys, Bangalore
 Trainer for CEH and CISSP for Spectrum Dubai.
 Cloud Computing Trainer for Bosch, Bangalore.
 Security+ Trainer for Scope International
 Trainer for ITIL foundation, Wipro Technologies
 ITIL and PRINCE 2 Trainer, ITSM Technologies
 Exin Cloud Computing Foundation Trainer for Cognex Technologies, Chennai
 ITIL Trainer for Master Mind Consulting
 Security+ Trainer for Simplilearn
 Trainer for BOSCH for EXIN Cloud Computing Foundation.
 Trainer for CISSP, CEH for Intellisecure.
 Trainer for CISSP, CEH and EXIN Cloud Foundation for Adept Technologies.
 Trainer for CISSP, EXIN Cloud Foundation, CEH, CHFI and CCSK for Simplilearn
 Trainer for HIPAA compliance, for ecfirst, USA.
 Trainer for OWASP (Web application testin and Secure Coding), PCI DSS, HIPAA, CEH, CISSP,
ISO27001 LI, Security+, Security Risk Management and Security Project Management for many
clients.
  Secure Coding trainer on Java for Society for Electronic Transaction and Security (Govt. of India)
and C-DAC.
 Handled Corporate trainings for Accenture (Bangalore and Gurgaon) and Computer Associates
(Hyderabad)
 Conducted Workshop on ‘Securing your Web Presence’ for Society for Electronic Transaction and
Security (SETS, Govt of India)
 Conducted Workshops on PCI DSS Security for Society for Electronic Transaction and Security
(SETS, Govt of India)
 ITIL Foundation trainer for Spectrum Me, Dubai
 Conducted Workshop on OCTAVE risk management methodology at Security for Society for
Electronic Transaction and Security (SETS, Govt of India)
 Security Consultant for SETS (Govt of India) – Active participation in Security training and
consulting for Government of India and Tamil Nadu entities (Privacy protected).
 Prepared the ‘Cyber Security’ syllabus for University Grant Commission, India.
 Security Consultant for E&Y, Bahrain
 Chapter leader for OWASP, Coimbatore.

Work Details:
Freelance Trainer:
 Infrastructure Security
o Ethical Hacking
o Cloud Computing
o Cloud Security
o PCI DSS
o (GSD331, PCI DSS, ISO27001, HIPAA ) Compliance
o Network Security
o Malware defense
o Anti Spam controls
o Secure Coding (C, C++, Java)
o Mobile Security
o Security Incident response and digital forensics
o Information Security Risk Management
o Internet Security
o Security Metrics – Measuring Security
o Security project management
o Web Application Security
 Tools
o Webgoat
o Burbsuite
o Nessus
o Nmap
o DVWA
o Xways (Forensics)

Profile:
1. More than 18 years of IT Experience.
2. Had been a trainer in UK, Dubai and Sweden.

Membership:
 Cryptography Research Society of India.