Sreejith Ramachandran

Details

Skills

Cyber Risk & Assurance: Risk Registers • TRA/STRA • Security Assessments • Third-Party Risk • Due Diligence • Security
Requirements • RFP/RFI Response • Contract Security Review • Risk Treatment
Security & Architecture: Security Control Design/Assessment • Security Requirements Engineering • Threat Modeling •
Security Architecture Review • Zero Trust Concepts • IAM/PAM • Network Security
Cloud & OT: Azure Security • Microsoft Security Concepts • Cloud Governance • ICS/SCADA Security • OT/IT Security
Concepts • IEC 62443 • NIST 800-82
Frameworks: NIST SP 800-53 • ITSG-33 • ISO/IEC 27001/27002 • ITIL/ITSM • SOC 1/2 • GDPR • PIPEDA • HIPAA • SOX •
PCI DSS • OWASP • COBIT • FedRAMP • STRIDE • MITRE ATT&CK

About

Senior cybersecurity consultant with 16+ years in cybersecurity and 20+ years in IT services, specializing in cyber risk,
security assurance and security requirements for federal, provincial and Crown corporation clients. Turns regulatory
and contractual obligations (NIST SP 800-53, ITSG-33, ISO/IEC 27001) into practical controls and risk decisions
executives can act on. Track record includes driving a Big 4 audit to zero nonconformities, establishing risk treatment
plans for 100% of identified risks, and holding ISO 22301 certification through a 45-day disruption. Expanding into
security architecture, cloud and OT/ICS security, backed by CISSP, CCSK and ongoing ISA/IEC 62443 study.