Amit Khot Email and Phone Number

• Developed and implemented an IT Compliance & Risk Management Framework for Toll Group, ensuring IT risks and controls are captured, prioritized, and reported. • Managed cross-functional stakeholders, conducted Business Impact and Risk Assessments across applications and infrastructure, and regularly reported top IT risks. • Led Risk Forums, monitored organizational Risk Appetite/Tolerance, and provided security recommendations in Security Architecture Review Board meetings. • Participated in customer-driven audits and led SOX and ISO 27001 implementation

As an IT Risk Manager, I have led consulting engagements across various organizational segments, focusing on customer audits, operational risk, and risk governance to strengthen internal controls and elevate the organization's overall security posture. I spearheaded the strategic direction for ISO27001 Program Management, establishing risk-based auditing frameworks for multiple sites and data centers. Reporting directly to the Chief Risk Officer, I drive the annual risk assessment process, ensuring the identification and implementation of key controls to mitigate risks. I also ensure that audit findings are comprehensively documented in line with ISO27001 standards and internal policies, validating the effectiveness and thoroughness of audit tests.

• Led end-to-end implementation of PCI-DSS programs for various clients.• Assessed information security maturity across processes and technology.• Analyzed client business environments to propose tailored information security solutions.• Delivered medium to large-scale Cyber Security Risk and Compliance projects independently.• Conducted assessments, gap analyses, and developed risk mitigation strategies for IT assets.• Implemented various security frameworks and standards, including ISO 27001 and SOX.• Managed policy, procedure, and standards administration.• Led small project teams, reviewed deliverables, and ensured effective project management.

• Successfully managed ISO 27001 and SSAE 16/SOX compliance reviews independently for the account.• Executed comprehensive compliance testing across various domains, including user ID management, network security, backup and restoration, contract management, service management, trivial password assessments, and risk management.• Ensured audit readiness and led teams through audit processes, proactively identifying and addressing compliance issues.• Delivered regular status updates on compliance activities to stakeholders.• Championed initiatives to strengthen the overall compliance posture of the organization.• Maintained in-depth knowledge of regulatory requirements, ISO 27001 standards, and BCP/DR practices.

• Led security consulting engagements, delivering tailored solutions in Managed Security Services, Risk and Compliance, and Cloud Security.• Provided expert consulting in Security Audits, Security Strategy Architecture, and Network & Data Center Design and Implementation.• Conducted comprehensive security audits and assessments of client infrastructure, recommending strategic improvements to enhance security posture.• Specialized in Security Testing to identify vulnerabilities and ensure robust defense across diverse environments.

• Led the network and security setup for Accenture's Pune data center, overseeing team management, device configuration, and vendor coordination.• Designed and implemented the network architecture, integrating security components such as Juniper SSL VPN, Juniper Netscreen, Nortel Contivity, and Cisco switches and routers.• Conducted firewall rule base auditing and ensured security best practices were embedded across the infrastructure.• Tested and documented existing IT processes and controls, ensuring compliance with organizational standards.• Managed the implementation and configuration of key technologies, including Juniper SSL VPN, Nortel Contivity, and Packet Shaper, to secure and optimize the network environment.