Manu Varghese

Cybersecurity GRC professional with 9 years of experience in access governance, compliance reporting, IT audit support, and risk management across regulated banking environments. Experienced in access reviews, segregation of duties, control testing, evidence collection, and DORA-aligned governance initiatives. ISO 27001 Lead Auditor certified and currently preparing for CRISC. Seeking GRC, IT Risk, IT Audit, and Information Security Analyst roles in India and remotely.

Assistant Consultant - Tata Consultancy Services - Kochi

(2025-03 - 2026-05)

• Worked with a team to help a reputed European bank achieve DORA compliance through network segmentation.
• Monitored and reviewed inbound and outbound connections of critical banking applications using Akamai Guardicore, identifying and blocking connections that were unrecognized or unnecessary.
• Coordinated with application owners to review connectivity requirements and guided them on DORA compliance expectations.
• Developed and maintained SOPs for network segmentation analysis and governance activities.
• Analyzed connectivity data in Excel and presented findings in a simplified, readable format for the team and application owners.
• Tracked remediation activities and followed through until identified risks were closed.
• Led a small sub-team handling application owner engagement, mailbox coordination, and governance reporting.
• Ran knowledge transfer sessions for junior analysts on governance processes.

Infrastructure Analyst, GIAM Global Functions - Citicorp Services India Private Limited - Chennai

(2022-06 - 2025-01)

• Managed access for Citibank staff, contractors, and automated IDs, making sure the right people had the right access and nothing more.
• Conducted regular access reviews across enterprise applications to make sure everything was compliant with security policies.
• Collected evidence and validated controls to keep the team prepared for internal and external audits.
• Maintained and improved SOP documentation to make governance processes more consistent and efficient.
• Handled incident escalations and coordinated with relevant teams to make sure issues were resolved on time.
• Ran onboarding and training sessions for new team members during migrations and transitions.

Senior Analyst, GIAM Mainframe Team - Citicorp Services India Private Limited - Chennai

(2018-12 - 2022-06)

• Reviewed user access for critical banking applications and mainframe systems, making sure no single person had more access than their role required.
• Checked for segregation of duties conflicts, ensuring that sensitive tasks required more than one person to complete.
• Worked closely with audit teams to collect evidence, test controls, and track remediation until issues were closed.
• Kept governance documentation up to date and made sure the team followed internal security policies consistently.
• Handled incident escalations and coordinated resolution with relevant teams promptly.
• Mentored junior team members and supported knowledge transfer during process transitions.
• Ranked number one for compliance and security practices across the team, 2021 to 2022.

Process Associate - HSBC Electronic Data Processing India Pvt Ltd - Chennai

(2016-11 - 2018-12)

• Supported compliance and audit checks for global tax reporting operations across multiple countries.
• Handled data validation, reconciliation, and quality checks to make sure everything met internal standards and SLA requirements.
• Managed issuance of tax certificates and financial documentation following strict internal control procedures.
• Coordinated with stakeholders to resolve queries and keep processes running accurately and on time.
• Mentored team members and supported training during process transitions.

Bachelor of Commerce - Commerce - Mahatma Gandhi University (2013)