---
title: "Erothi Vimala - Associate Manager in Hyderabad | Tal"
description: "Meet Erothi Vimala, Cybersecurity GRC Specialist | ISO/IEC 27001 LA | AI Governance | RBI/SEBI | TPRM | Cloud Security | AWS | SOC & SOX 404 | ITGC/ITAC | IT Audits | NIST CSF/FedRAMP | Compliance-as-Code (OSCAL) | MBA | Ex-Deloitte based in Hyderabad."
image: "https://tal.club/meet/erothi-vimala/share-image"
---

# Erothi Vimala on Tal

## Headline

Cybersecurity GRC Specialist \| ISO/IEC 27001 LA \| AI Governance \| RBI/SEBI \| TPRM \| Cloud Security \| AWS \| SOC & SOX 404 \| ITGC/ITAC \| IT Audits \| NIST CSF/FedRAMP \| Compliance\-as\-Code \(OSCAL\) \| MBA \| Ex\-Deloitte

## Location

Hyderabad

## Work experience

Associate Manager at HCLTech, Sep 2025 \- Present · 8 mos, Hyderabad, • Executing FedRAMP\-aligned gap assessments mapped to NIST SP 800\-53 Rev 4 & Rev 5 controls, identifying gaps across access control, audit, and configuration management domains • Standardized control documentation by selecting strongest control implementations across policy sets and aligning them with SSP requirements • Implementing OSCAL\-based structured documentation \(JSON\) using Visual Studio Code, enabling machine\-readable SSPs and supporting compliance automation and integration with GRC tools • Coordinating control testing, evidence validation, and cross\-team collaboration • Strengthening control maturity and improving overall audit readiness • Supporting continuous monitoring and ongoing compliance governance activities • Developing customer\-facing Trust Center documentation aligned with SOC 2 Trust Services Criteria • Translating internal security controls into clear, non\-sensitive external documentation • Reviewing and approving security\-related requests through Freshservice workflows, ensuring proper access governance and control validation • Collaborating with DevOps teams to integrate security checks into deployment processes and ensure secure configurations before production release • Validating security impact of infrastructure and application changes prior to implementation • Supporting periodic access reviews and control monitoring to maintain compliance posture

Cyber Security Consultant at Deloitte, Jan 2023 \- Sep 2025 · 2 yrs 9 mos, Hyderabad, • Managed finding lifecycle in RSA Archer, including tracking remediation timelines, validating due dates, coordinating with finding owners for timely closure\. Prepared risk acceptance documentation, ensuring formal approval from risk managers for residual risks\. • Worked extensively with ServiceNow, OneTrust, IGAR, and Splunk for governance, risk, compliance, and monitoring activities\. • Provided IT risk, audit, and compliance support to global enterprise clients, ensuring adherence to regulatory frameworks such as GLBA, GDPR, PCI DSS, HIPAA and governance standards including NIST CSF, COBIT, and COSO\. • Executed SOX ITGC control testing \(TOD & TOE\) for financial services clients \(e\.g\.,Deutsche Bank\), focusing on SAP access controls, SoD, PAM, and PAR\. Conducted walkthroughs with ISOs and ITAOs to understand control design, prepared MoMs and detailed test cases, and coordinated with control owners for evidence collection\. Performed sampling methodology for TOE testing to assess operating effectiveness and validated control execution\. Tested SDLC and Source code\-related key technical controls, providing actionable recommendations for improvement\. • Performed AWS application security assessments to ensure compliance with global standards \(PII, PHI, G4, SOC2 and Amazon\-specific requirements\), leveraging tools such as AWS Config, Amazon GuardDuty, AWS Security Hub, CloudWatch, and CloudTrail to evaluate security posture, logging, and API activity monitoring \(including Timber\)\. • Validated CI/CD pipeline deployment processes and approval workflows to ensure proper segregation of duties \(SoD\) and secure release management\. • Assessed encryption key management and key rotation practices to ensure compliance with security standards\. • Individual Participation on on\-site vendor risk audits for CTRLs Datacenters as part of TPRA engagements and performed secondary\-party vendor assessments for insurance clients to evaluate third\-party security and compliance controls\.

Operational Risk Consultant at YES BANK, Jun 2021 \- Jan 2023 · 1 yr 8 mos, Andhra Pradesh, India

Assistant Manager\- Retail banking at IndusInd Bank Limited, Dec 2020 \- Jun 2021 · 7 mos, Andhra Pradesh, India

KYC Analyst at HDB Financial Services Ltd\., Sep 2019 \- Oct 2020 · 1 yr 2 mos, Telangana, India

## Education

Master of Business Administration, Human Resources Management and Services, Andhra university

Bachelor of Commerce \- BCom, Computer Programming, Specific Applications, Andhra university

[View the original profile](https://tal.club/meet/erothi-vimala)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Person",
      "@id": "https://tal.club/meet/erothi-vimala#person",
      "name": "Erothi Vimala",
      "url": "https://tal.club/meet/erothi-vimala",
      "description": "Meet Erothi Vimala, Cybersecurity GRC Specialist | ISO/IEC 27001 LA | AI Governance | RBI/SEBI | TPRM | Cloud Security | AWS | SOC & SOX 404 | ITGC/ITAC | IT Audits | NIST CSF/FedRAMP | Compliance-as-Code (OSCAL) | MBA | Ex-Deloitte based in Hyderabad.",
      "jobTitle": "Associate Manager",
      "worksFor": {
        "@type": "Organization",
        "name": "HCLTech"
      },
      "hasOccupation": {
        "@type": "Occupation",
        "name": "Associate Manager"
      },
      "homeLocation": {
        "@type": "Place",
        "name": "Hyderabad"
      },
      "alumniOf": [
        {
          "@type": "EducationalOrganization",
          "name": "Andhra university"
        },
        {
          "@type": "EducationalOrganization",
          "name": "Andhra university"
        }
      ],
      "mainEntityOfPage": {
        "@id": "https://tal.club/meet/erothi-vimala#webpage"
      }
    },
    {
      "@type": "ProfilePage",
      "@id": "https://tal.club/meet/erothi-vimala#webpage",
      "url": "https://tal.club/meet/erothi-vimala",
      "name": "Erothi Vimala on Tal",
      "description": "Meet Erothi Vimala, Cybersecurity GRC Specialist | ISO/IEC 27001 LA | AI Governance | RBI/SEBI | TPRM | Cloud Security | AWS | SOC & SOX 404 | ITGC/ITAC | IT Audits | NIST CSF/FedRAMP | Compliance-as-Code (OSCAL) | MBA | Ex-Deloitte based in Hyderabad.",
      "dateModified": "2026-06-10T13:55:49.267Z",
      "isPartOf": {
        "@id": "https://tal.club/#website"
      },
      "mainEntity": {
        "@id": "https://tal.club/meet/erothi-vimala#person"
      },
      "inLanguage": "en-IN"
    }
  ]
}
```