Ranjeet Kumar

• Spearheaded comprehensive GRC initiatives, focusing on ISO 27K, PCI DSS, ITGC, RBI, Saudi SAMA, and NCA, ensuring adherence to compliance standards and on-time project completion.
• Engineered and executed robust Third-Party Risk Management (TPRM) frameworks, effectively implemented in Indian banks, Saudi-regulated entities, and U.S. corporations.
• Conducted in-depth vendor risk assessments and ISO 27K compliance audits, significantly minimizing risk exposure and enhancing governance across varied client environments.
• Cultivated strong relationships with stakeholders to foster a culture of compliance and security awareness, driving continuous improvement in information security practices.

• Led comprehensive audits for PCI DSS, ISO27K, and NPCI frameworks, enhancing compliance and security posture.
• Developed and implemented robust ISMS policies and standards, ensuring alignment with industry best practices.
• Conducted thorough information security gap assessments in line with the RBI Cybersecurity Framework, identifying critical vulnerabilities.
• Streamlined incident management processes, improving response times and reducing potential security breaches.
• Collaborated with cross-functional teams to promote a culture of security awareness and compliance across the organization.
• Managed third-party risk assessments, ensuring vendor compliance with security standards and regulations.
• Continuously monitored and improved GRC processes, contributing to a resilient information security environment.

• Spearheaded compliance initiatives for PCI DSS, ITGC, RBI Digital Payments, VAPT, and ISMS audits, enhancing organizational security posture.
• Developed and implemented comprehensive information security policies, procedures, and guidelines, focusing on data privacy, classification, and asset management.
• Led audit facilitation efforts, meticulously reviewing artifacts for PCI DSS, NBFC, RBI, and ISMS, resulting in seamless external audit submissions.
• Collaborated with cross-functional teams to strengthen governance, risk management, and compliance frameworks, ensuring alignment with industry standards.
• Championed incident management processes, improving response times and reducing potential risks associated with third-party vendors.

• Developed and maintained comprehensive security policies and processes to ensure compliance with industry regulations.
• Led and facilitated various audits, including Information Security (IS), IT General Controls (ITGC), and RBI gap assessments, ensuring thorough review of artifacts for external submissions.
• Conducted detailed risk assessments and maintained risk registers, effectively reporting mitigation strategies to senior management.
• Successfully implemented and monitored RBI master guideline controls tailored for the Non-Banking Financial Company (NBFC) sector.
• Transitioning from a Senior Consultant in Information Security/Governance Risk and Compliance (GRC) to an Information Security Analyst role, focusing on third-party risk management and vendor risk management.

• Organized and delivered comprehensive cybersecurity awareness programs and quality standard training for staff, enhancing overall security culture.
• Conducted impactful training and change management initiatives, driving improvements in IT operations and Visa processes.
• Executed biannual internal IT audits (onsite and offsite) across global locations, ensuring strict compliance with ISMS, ENS, and ISO 27001 control procedures.
• Transitioned from Internal IT Auditor to Information Security Analyst, focusing on Governance, Risk, Compliance, Third-Party Risk Management, and Vendor Risk Management.
• Collaborated with cross-functional teams to strengthen information security posture and mitigate risks effectively.