Sivaram Tumati

Compliance-focused GRC professional with 8+ years of experience supporting Governance, Risk & Compliance (GRC) programs across financial services, banking, and technology sectors, with deep expertise in IBM OpenPages and hands-on involvement in compliance operations, audit support, and control management. Hands-on experience supporting user access reviews (UARs), conducting vendor risk assessments, collecting and organizing audit evidence for SOC 2, HIPAA, and operational risk frameworks, and partnering with business stakeholders to maintain audit-ready compliance posture. Proven ability to maintain and improve GRC platform configurations — including control tracking, workflow automation, and dashboard reporting — to streamline compliance monitoring and program visibility.

Experienced in responding to customer security questionnaires and due diligence requests, collaborating with risk officers, and proactively leveraging AI tools (Copilot, Generative AI) to improve GRC process efficiency and documentation quality.

GRC Analyst & Compliance Platform Lead - IBM Corp - Austin, TX

(2021-07)

Supported enterprise-wide compliance program operations on IBM OpenPages Cloud, working alongside product security and risk teams to maintain ongoing GRC program health, control tracking, and audit-readiness across global business units.

• Performed recurring user access reviews (UARs) across OpenPages platform roles and integrated systems, coordinating with system owners to validate entitlements, revoke excessive access, and document evidence for audit purposes.
• Collected, organized, and prepared compliance evidence packages supporting internal and external audits, ensuring documentation was accurate, current, and aligned to SOC 2, HIPAA, and operational risk control requirements.
• Maintained and updated GRC platform configurations — including workflow rules, control frameworks, task views, and role-based security models — to reflect evolving compliance requirements and improve process efficiency.
• Partnered with product owners, risk officers, and business stakeholders to conduct control gap analyses, map compliance requirements to operational controls, and track remediation activities through to closure.
• Responded to internal customer security inquiries and due diligence requests, drafting and maintaining standard responses and supporting documentation in alignment with enterprise risk posture.
• Leveraged AI tools including Copilot and Generative AI to streamline GRC documentation, draft policy content, summarize audit evidence, and improve program reporting quality and turnaround time.
• Drove continuous GRC process improvements, identifying opportunities to automate recurring compliance activities and reduce manual effort across UAR cycles, evidence collection, and reporting workflows.

GRC Analyst / Compliance Platform Specialist - MUFG Union Bank - Tempe, AZ

(2019-09 - 2021-07)

Supported Operational Risk Management, Policy Management, and Risk Control Self-Assessment (RCSA) compliance programs, coordinating with risk officers and control owners to maintain accurate, audit-ready GRC records.

• Conducted third-party vendor risk assessments, evaluating supplier security controls, reviewing vendor security questionnaire responses, and tracking remediation activities to ensure alignment with bank risk standards.
• Assisted in maintaining and updating organizational security policies and risk standards, incorporating regulatory changes and ensuring documents were current, accessible, and aligned to compliance frameworks.
• Collected and organized audit evidence for operational risk and compliance reviews, partnering with internal teams to ensure evidence packages were complete, accurate, and submitted on schedule.
• Performed gap analyses against compliance control frameworks, documented findings, defined control objectives, and monitored remediation progress, ensuring timely closure of identified risks.
• Coordinated with cross-functional teams using Agile/Scrum practices to track compliance tasks, manage GRC platform updates, and report on control health and program status to leadership.

GRC Compliance Analyst - Charles Schwab - Denver, CO

(2016-03 - 2019-08)

Supported Operational Risk Management, Compliance Management, and Audit Management programs, maintaining GRC platform data integrity and ensuring controls were accurately tracked and documented.

• Assisted in preparing audit evidence packages for regulatory and internal audits, coordinating with compliance and risk teams to gather, validate, and organize supporting documentation.
• Maintained and updated compliance reporting dashboards using IBM Cognos, delivering executive-level risk and control health analytics to support data-driven decision-making across audit and risk leadership.
• Monitored security awareness training completion across business units, following up with teams on outstanding requirements and maintaining training completion records for audit purposes.
• Supported platform upgrades and regression testing to ensure GRC controls, workflows, and reporting remained accurate and operational following system changes.

GRC Platform Analyst - Code Tech Inc - Farmington Hills, MI

(2015-09 - 2015-12)

• Administered IBM OpenPages GRC platform configurations, maintained risk and compliance data, and supported client teams with compliance reporting and control documentation needs.
• Executed environment migrations and validation testing across OpenPages instances, ensuring data integrity and continuity of GRC operations during platform transitions.

Software Engineer - CodeApps - Hyderabad, India

(2012-08 - 2014-08)

Developed enterprise application features and REST APIs supporting internal risk and compliance workflows, gaining foundational exposure to role-based access control (RBAC) and authentication security models.

Master of Science - Computer Science - University of Central Missouri

Bachelor of Engineering - Computer Science - Jawaharlal Nehru Technological University (JNTU)