Ramesh Reddy Ganugapenta
Cloud Security & GRC Consultant | ISO 27001 ISMS Lead Implementation & Auditing | DevSecOps | Security Architect
Professional Summary
Cybersecurity professional with 6+ years in security and 15+ years in IT, specializing in cloud security, GRC, and secure architecture across AWS, Azure, and hybrid environments.
Expert in implementing ISO 27001 end-to-end, conducting internal audits, and developing risk management programs aligned with NIST CSF, CIS Benchmarks, and Zero Trust frameworks.
Proven track record building secure CI/CD pipelines, improving cloud posture, and embedding security into delivery workflows without compromising velocity.
Passionate about transforming complex security requirements into actionable, scalable solutions that balance risk and business goals.
Core Expertise
Cloud Security
AWS, Azure, GCP architecture and security implementation
DevSecOps
CI/CD security automation and integration
ISO 27001
ISMS Lead Implementation & Auditing
Zero Trust
Security architecture and design
GRC & Risk Management
NIST, CIS, COBIT frameworks
IT Audit & Compliance
Policy development and controls
Vulnerability Management
Assessment and remediation
Current Role: Praxis
Cyber Security Consultant | February 2024 - Present
01
Security Advisory
Trusted advisor to engineering, product, and architecture teams on secure design and architecture reviews
02
Threat Modeling
Built and executed threat models for critical applications, assessing authentication, authorization, and attack vectors
03
Compliance Assessments
Performed security assessments aligned with CIS Benchmarks, NIST 800-53, and ISO 27001
04
Azure Modernization
Implemented identity hardening, network security, and Zero Trust adoption
DevSecOps Excellence
Security Automation Pipeline
Designed and implemented comprehensive DevSecOps pipelines integrating multiple security layers for continuous validation.
SAST & SCA
DAST
IaC Scanning
Container Security
Implemented automated cloud security guardrails across Azure and deployed Microsoft Defender for Cloud and Identity for enhanced threat visibility.
Tata Consultancy Services
Senior Security Specialist | March 2018 - November 2024
Multi-Cloud Security
Implemented security policies and guardrails using Sentinel, native cloud controls, and Prisma Cloud across AWS, Azure, and GCP
Interanal Auditing
Evaluated IT general controls (ITGC), application controls, and information security controls for regulatory and internal compliance.
Conducted IT and IS audits across technology environments, infrastructure, cybersecurity, and business continuity.
Assessed IT and information security risks using ISO 27001, identifying control gaps and residual risks.
Security Automation
Led end-to-end DevSecOps initiatives integrating security tools into CI/CD pipelines using Jenkins, GitHub Actions, and Ansible
Container Security
Secured and optimized containerized applications using Docker and Kubernetes for resilient cloud-native deployments
Infrastructure & Cloud Journey
1
ValueLabs (2016-2018)
Managed 16 vCenter servers, 5000+ VMs, and 400+ AWS instances. Built hybrid cloud infrastructure and implemented high-availability solutions.
2
Hewlett Packard Enterprise (2015-2016)
Managed 15 vCenter servers and 30,000+ VMs across global locations. Led storage migration from EMC to 3-PAR and DR activities.
3
Hitachi Consulting (2013-2015)
Maintained 6,000 VMs and 100 hosts. Executed VMware migrations from 4.1 to 5.0 and 5.0 to 5.1 with performance optimization.
4
Wipro Infotech (2011-2013)
Managed Active Directory, Terminal Server, and VMware infrastructure. Implemented group policies and security compliance.
Certifications & Skills
Professional Certifications
CISA
Certified Information Systems Auditor
ISO 27001 Lead
Implementation & Auditing
Azure Solution Architect
Cloud architecture expertise
VCP & ITIL V3
VMware and service management
Technical Proficiencies
  • Governance, Risk Management & Compliance (GRC)
  • NIST CSF, CIS Benchmarks, COBIT, MITRE CAPEC
  • Jenkins, GitHub Actions, Ansible, JFrog Artifactory
  • Microsoft Defender, Prisma Cloud, Sentinel
  • Docker, Kubernetes, Terraform
  • ServiceNow, Archer, Jira
Global Experience & Languages
🌎 Location
Querétaro, Mexico
Mexico PR holder
💼 Availability
Open to remote opportunities
Freelancing | LATAM & Global roles
🗣️ Languages
English (Professional)
Hindi | Telugu
Let's Connect
Ready to strengthen your security posture?
With expertise spanning cloud security, GRC, DevSecOps, and ISO 27001 implementation, I help organizations build secure, compliant, and scalable solutions.
Whether you need security architecture guidance, compliance support, or DevSecOps transformation, let's discuss how I can add value to your team.
📱 Phone
+52 442 610 2732
💼 LinkedIn
linkedin.com/in/rameshreddyg
Made with