Amit Karnik Email & Phone Number

Charlotte, Nc, Us

Charlotte, Nc, Us

New York, Ny, Us

Cyber Risk Management:• Lead the overall scoping, planning, tracking, responses, closure verification, and reporting of risks identified via an enterprise risk assessment process (full cycle). • Apply mechanisms for rating, aggregating, prioritizing, and assigning owners to identified risk findings.• Ensure that tracked risks and findings adhere to agreed-to operational definitions, to preserve consistency and clarity across risks that are to be formally introduced and managed.• Maintain findings lists (and/or formal risk register), identifying and relating assessment findings to other artifacts stored in an enterprise Governance, Risk & Compliance (GRC) data management platform. • Lead a team of Risk analysts, and coordinate smooth execution of Risk Management plans that involve people from multiple, disparate teams.• Lead ongoing Tier 2 and Tier 3 level risk assessment exercises.Policy Governance:• Lead organizational Security Policy development and maintenance.• Lead a team of Technical writers to document security standards, guidelines, processes and procedures.• Act as a product owner for the automation of policy development, and maintenance using RSA GRC Archer platform.

Mumbai, Maharashtra, In

Throughout my 10+ year tenure at TCS, I participated in 13 full-time client projects focused primarily on the following areas:1. Policy Governance - Following a security breach, reviewed Security policies and related documentation to identify gaps - Coordinated and Led the development of secure coding standards2. Risk Management - Assessments and Audits - Conducted and Led Third Party Risk Assessment engagements and Site audits - Performed control assessments to cover compliance with Security laws, and frameworks such as - NIST, ISO27K, HIPAA, SOX, PCI, etc. - Reviewed security reports and attestations, such as - SOC/ SSAE Reports, Penetration Tests, Assessments, etc. - Led Application security code reviews, and assessments - including SCABBA, WhiteBox, etc. 3. Security Operations/ Tool support - Deployed Data Protection tools, such as Varonis, Digital Guardian, etc. - Led Security Operations teams - such as L2 and L3 teams managing Symantec AV, DLP, SIEM tools, etc. - Using DLP consoles, configured and tested DLP rules, installed DLP agents, and handled level 3 troubleshooting - Used Splunk, and homegrown log management and reporting tools4. Incident Response - Led IR teams to manage the containment of computers, and mobile devices - Managed response processes for stolen assets, and reduced risk to client organizations - Trained business users in secure handling of infected assets5. Identity and Access Governance - Led Architectural assessments, such as POC for CyberArk v/s OPAM, OKTA - Managed SOX Manual Access review program including scoping, entitlement reviews, and artifact management6. Security Reporting and dashboards - Automated Third Party Risk Management reporting using web styling technologies - Created dashboards using Excel, and in-house tools such as SupportCentral - Defined KPIs, and KRIs, and led engagement for collecting data, building a data model, and dashboard creations

Noida, Up, In

HTML, CSS, JavaScript, VBScript - Developed online surveys using ConfirmIT - a survey programming tool - Defined and validated survey logic, performed testing, and fixed errors - Created web-based reports/outputs based on client requirements

Master'S Degree, Computer Science

Bachelor Of Science, Computer Science