Pravallika Tatineni
Summary
Risk management and Audit professional with deep expertise in identifying, evaluating, and mitigating financial and operational risks. Adept at identifying and analyzing potential risks, implementing robust risk management strategies, and fostering collaboration to achieve organizational goals. Strong focus on team collaboration and delivering results, adaptable to changing needs. Known for reliability, critical thinking, and effective communication.
Overview
6
6
years of professional experience
1
1
Certification
Work History
PCI DSS Auditor & Vulnerability Management / Risk Analyst
Herbalife Nutrition
07.2021 - 11.2024
- Conducted comprehensive audits to ensure compliance with regulatory standards.
- Assisted in the internal and external PCI DSS audits, ensuring all in-scope systems met security controls and compliance requirements
- Led PCI DSS compliance audits for internal systems, ensuring adherence to all 12 PCI DSS requirements, while preparing and implementing remediation plans for identified gaps
- Acted as the subject matter expert for PCI DSS standards, providing guidance to stakeholders on compliance requirements and industry best practices
- Develop and deliver training sessions on PCI DSS, risk management strategies, and vulnerability scanning tools
- Improved accuracy of financial reporting by analyzing complex data sets.
- Coordinated vulnerability management efforts by utilizing tools such as Contrast, Bitsight, Snyk, Burpsuite, Synopsis, Qualys, and Nessus to scan and prioritize vulnerabilities across production systems and applications
- Managed multiple audits and risk assessments simultaneously, ensuring the timely and successful completion of security assessments and remediation efforts
- Developed comprehensive vulnerability reports for senior management, highlighting critical risks and recommending risk treatment strategies
- Collaborate with cross-functional teams to develop and implement risk mitigation plans for identified vulnerabilities
- Design and enforce internal policies and controls aligned with industry best practices and compliance standards
- Monitor and report on risk metrics, including vulnerability remediation progress and risk treatment outcomes
- Managed incident tickets related to vulnerabilities and helped track the remediation process using JIRA and ServiceNow
- Collaborated with IT teams to develop and implement patches, system updates, and security measures to reduce vulnerabilities and enhance overall security posture
- Prioritized vulnerabilities based on risk impact and worked with system owners to develop patching and remediation strategies
- Maintained accurate vulnerability databases and reporting dashboards to communicate findings to relevant stakeholders
- Provided ongoing risk analysis and maintained risk registers for enterprise-level applications
Project Manager, Production Support Project
Herbalife Nutrition
07.2021 - 11.2024
- Managed end-to-end project lifecycle for production support initiatives, ensuring the seamless operation and support of critical production systems
- Coordinated cross-functional teams for successful project completion on time and within budget.
- Improved project delivery by streamlining communication between stakeholders.
- Worked with development, operations, and security teams to implement changes and fixes to production systems, adhering to change management and release management processes
- Utilized Fluid to plan, track, and deliver projects on time and within scope, leading daily stand-ups and weekly sprint reviews
- Managed project budgets, resource allocation, and timelines for production support projects, ensuring efficient use of resources and achieving cost-efficiency
- Oversaw incident and problem management, coordinating root cause analysis and ensuring timely resolution of production issues to minimize downtime
- Provided regular status reports to stakeholders
Security Analyst
Cognizant Technology Solutions
12.2018 - 07.2021
- Analyzed log files for anomalies, identifying potential intrusions or malicious activity before significant damage occurred.
- Monitor for external threats and alert respective team regarding intrusions or suspicious activity
- Monitor security logs and events to determine cause of security related events or to identify potential security related risks
- Analysing the events triggered by Network Security tools IDS/IPS with the help of information present in the packet text of that rule and confirming on the verdict status like True Positive or False Positive and taking further actions
- Good experience with Service-now for resolving incidents with in the SLA and checking for CMDB information and generating reports
Education
Bachelor Technology - Mechanical Engineering
RVR&JC College of Engineering & Technology
05.2018
Skills
- Vulnerability Management
- Risk Assessment
- Regulatory Compliance
- Internal & External Audits
- PCI DSS Compliance & Auditing
- Project Management & Coordination
- Change & Release Management
- Cross-Functional Team Collaboration
- Security Incident Response & Remediation
Certification
- Certified Payment Industry Security Implementer (CPISI)
- Certified Ethical Hacker (CEH)
Tools
- Vulnerability Scanning : Contrast, Bitsight, Snyk, Burpsuite, Synopsys, Qualys & Nessus
- Vulnerability Management & Reporting : Nucleus, Audit Board, Power BI
- Project Management : Fluid, Azure Work board
- Change Management & Ticketing : ServiceNow, Jira
- Security Frameworks : PCI DSS, ISO 2700
- Operating Systems : Windows, Linux, macOS
- Network Security Tools : Firewalls, IDS/IPS, VPN
- Security Information & Event Management (SIEM) : Qradar, ArcSight
Timeline
PCI DSS Auditor & Vulnerability Management / Risk Analyst
Herbalife Nutrition
07.2021 - 11.2024
Project Manager, Production Support Project
Herbalife Nutrition
07.2021 - 11.2024
Security Analyst
Cognizant Technology Solutions
12.2018 - 07.2021
- Certified Payment Industry Security Implementer (CPISI)
- Certified Ethical Hacker (CEH)
Bachelor Technology - Mechanical Engineering
RVR&JC College of Engineering & Technology
Similar Profiles
Siyamkumar RSiyamkumar R
Business Analyst Manager at Herbalife NutritionBusiness Analyst Manager at Herbalife Nutrition
Natacia Kaziwa MotenaNatacia Kaziwa Motena
Distributor at Herbalife NutritionDistributor at Herbalife Nutrition
SATHISH MANCHIKANTISATHISH MANCHIKANTI
Principal Developer II at Herbalife NutritionPrincipal Developer II at Herbalife Nutrition