Information Security Cyber
Resume:
Phone
SOFT SKILLS
CORE COMPETENCIES
Cyber/ Information Security
& Governance/ Network Security
Vulnerability Assessment &
Management
Requirement Gathering &
Analysis
Disaster Recovery & Contingency
Planning
Change Management, Process
Improvement/ Enhancements
Operations Management
Information Risk Assessment
IT Policies, Processes, Procedures
& Framework
Customer Relationship &
Retention
Team Building, Mentoring &
Leadership
KAMALAHASAN R
Utilize expertise in Information Security and Cyber Security to excel in leadership positions within the industry. Targeting opportunities in Chennai and Bengaluru.
PROFILE SUMMARY
Offering expertise of nearly 25 years with consistent track record of progression, repeatedly achieving goals and producing immediate improvements in Information Security and Risk Management.
Extensive experience in cyber security through governance, process & control designing, security risk management, controls & audit and security program management by implementing best practices.
Expertise in configuration and management of promiscuous and Inline monitoring, custom signatures, blocking, event action, and event monitoring.
Excellence in driving vision and roadmap across various assignments; equally skilled in architecting business solutions using ground up development.
Proficient in driving Business Analytics Functions, spearheading Vendor Management, Client Management, Escalation Management, Crisis and Conflict Management.
Acknowledged for exceptional performance in process improvements, change management and facilitation of multiple projects while ensuring compliance.
Directed the Information Security programs in all key aspects including incident response, security analytics, compliance, policy, standards, procedures, awareness, network security, data protection, third party management and business continuity planning.
Expertise in setting out delivery standards for various operational areas, implementing quality systems & procedures to facilitate a high-quality experience, while adhering to the SLAs and business services by ensuring effective management of resources including people, collateral, positioning, use cases, best practices.
Possess excellent skills in managing complete project management activities, ensuring timely deliveries as per defined quality standards; implemented project plans, risk assessments and contingency plans; proficient in directing corporate IT initiatives while participating in planning, root cause analysis and implementation of solutions.
Track record of establishing cordial relationships with stakeholders, technical teams & vendors for successfully executing concurrent projects; effective leader with capabilities in motivating teams, maintaining deliverables as per the defined guidelines along with elevating service standards for operational excellence, and conducting knowledge sharing sessions.
ACADEMIC DETAILS
2008: PG Diploma in Business Administration from Pondicherry University 1996: B A (Corporate Secretary) from Guru Nanak College, Madras University
CERTIFICATIONS
CRISC, CISA, Microsoft 365 Certified Security Administrator, Microsoft Certified Azure Security Engineer, GDPR, GB & BB Lean Six Sigma, CSA Cloud Security, ISO 27001-2022 – Certified Lead Auditor
TRAININGS
ISO9001:2015, ISO2000:2011, PCIDSS, Risk Management & Analysis, BCM, CMMi, BS10012, SOC, Compliance
***********@*****.**.**
WORK EXPERIENCE
Oct’22-Till Date: Detect Technologies Private Limited as General Manager-IT Risk & Compliance (CISO) Jul’21-Sep’22: ProV Infotech Systems Private Limited as Senior Manager-Risk & Compliance Jul’20-Jun’21: Capgemini Technology Services India Limited as Senior Consultant May’19-Nov’19: Kryptos Technologies Pvt. Ltd. as Manager-Audit & Compliance Oct’18-Apr’19: Aspire Systems (India) Pvt. Ltd. as Assistant Manager-Information Security Jul’17-Oct’18: NTT Data Services as Senior Consultant GRC Jun’11-Jun’17: Ramco Systems Ltd. as Assistant Manager-Quality & Compliance Sep’10-Jun’11: Child Rights & You as Manager-ISO
Nov’07-May’10: S&S Business Solutions Pvt. Ltd.as Manager-Audit & Compliance Dec’05-Nov’07: Computer Age Management Services Pvt. Ltd. as Assistant Manager-Quality & Compliance Jun’02-Dec’05: Cactus Imaging India Pvt. Ltd. as Client Manager Nov’99-Jun’02: SSI Ltd. as Branch Manager
Roles Across Career:
Managing end-to-end IT audits of banking application, technology solution delivery, IT Infrastructure and Processes, Information Security.
Maintaining Security Compliance Framework as per security policy & directives; developing control framework for security health checks monitoring.
Leading the Cyber Security functional area and its respective teams across Protective Monitoring, Testing, Incident Management, and Threat & Vulnerability Management.
Designing processes and privacy controls to ensure compliance with laws, regulations, and internal standards in the most efficient, streamlined, and customer-centric manner.
Strategizing for Business Continuity, Disaster Recovery, and continuously testing these plans across the organization and 20 projects.
Refining the Incident Management Procedure, collaborating closely with relevant departments to swiftly resolve incidents, meticulously document corrective actions, and diligently capture valuable lessons learned.
Steering for threat hunting, content management and technical support, IR support, incident investigation, and general consulting services for a variety of customers across multiple industry verticals.
Actively participating in ISMS Steering Committee Meetings, MR meetings, and ISMS task force meetings.
Providing critical inputs to RFPs and diligently completing security questionnaires.
Engaging in audits conducted by customers and overseeing the implementation of security requirements specified by customers within the audit domain.
Developing the strategic ISTP MIS reporting proposal to define the end state reports and obtain management approval.
Defining, implementing, and deploying processes across various departments within the organization in accordance with ISO 9001:2015, ISO 20000 standards, ISAE 3000, ISAE 3402, and the CMMI V1.3 ML3 model.
Ensuring redundancy in critical systems, prepositioning of assets and trained personnel for adaptability and resilience in the face of disruptions.
Drafting disaster recovery plans for the network and security devices; interfacing with vendors for network and security products; ensuring that IT systems, applications, and communication equipment within the organization were managed and maintained in accordance with documented processes, procedures, guidelines, and instructions.
Rehearsing and refining contingency plans for the restoration of command and control, communication, casualty evacuation, and the provision of rations and medicines for sustaining critical missions under adverse conditions.
Coordinating for activities related to monitoring and review of QMS implementation and provide regular updates to QA head and executive management.
Serving as a member of the IT Leadership Work Group, collaborating effectively with peers and executives, including members of Executive Management.
Providing team personnel recommendations concerning employment, career development, performance evaluations, compensation, and promotions within established policies and guidelines.
Collaborating with Senior Business, IT Services Leaders and other risk managers to resolve challenging risk matters. NOTABLE ACCOMPLISHMENTS ACROSS CAREER
Succeeded in implementing ITIL aligned with the client's business requirements.
Achieved organization certification for ISO 9001:2008 (Quality Management System).
Attained organization certification for Certified ISO 20000 (ITIL).
Effectively implemented a Risk Management Tool and Strategy.
Secured organization certification for Certified ISO 27001: 2022 (Information Security Management System).
Successfully completed MS 500 and AS 500 certifications.
Formulated and executed Vendor Risk Management within SLA.
Maintained current awareness of Information Security developments, including business continuity, data management, security and encryption, vulnerability analysis, and audit.
Provided AMP with a comprehensive understanding of its IT risk and security profile. PERSONAL DETAILS
Address: Chennai-600014, Tamil Nadu
Languages Known: English & Tamil
Date of Birth: 13th June 1975
Contact this candidate