Kumar K Email & Phone Number

London, England, United Kingdom

•Possessing extensive knowledge and experience in Identity and Access Management (IAM).•Designed and executed Client compliance pattern analysis using the Secure Software Assurance Maturity Model, facilitating seamless integration of new products and ensuring adherence to security standards.•Proficient in adversary tools, techniques, and procedures, enabling proactive threat mitigation strategies.•Responsible for conducting detailed root cause analysis reports to inform decision-making processes.•Served as an ISO27001 Lead Implementer, developing policies, procedures, and guidelines aligned with framework standards.•Demonstrated expertise in offensive security, vulnerability scanning, penetration testing, and Data Loss Prevention (DLP) tools.•Utilized vulnerability management tools such as Qualys, implemented system hardening techniques, and applied patches based on vulnerability scores.•Collaborated with key stakeholders to monitor and enhance cyber security improvement plans.•Experienced with SIEM platforms including Sentinel and Rapid7 for real-time security alert monitoring.•Conducted Vulnerability assessments, including SAST (SonarQube) and DAST (WebInspect), and penetration testing across various business units.•Developed internal control systems and audit logs to maintain information access levels and security clearances.•Established effective security governance principles, standards, and procedures.•Conducted IT control audits including PCI compliance, ISO27002 (ISMS), and infrastructure/web application audits.•Identified and addressed operational gaps in investigations, fine-tuning use cases, thresholds, and tools.•Demonstrated a proactive and systematic approach to problem-solving.•Created policies, standards, and security frameworks including NIST and CIS, with expertise in formal documentation.•Investigated phishing, spam, and spoofed emails using Proofpoint email gateway, implementing filtering rules.

India

•Managed user accounts within Active Directory (AD) and onboarded user accounts in CyberArk, maintaining Privileged Session Manager (PSM) and Central Policy Manager (CPM) vaults.•Conducted annual security control checks, ensuring timely collection and verification of evidence to meet established security standards.•Contributed to the IT Road Map by performing risk assessments for projects not included in the mandatory IT Road Map for 2022, ensuring all potential risks were identified and mitigated.•Developed policies, procedures, standards, and guidelines aligned with ISO standards, establishing a robust security framework for the organization.•Ensured closure of identified vulnerabilities and provided necessary mitigation steps or compensatory controls to align with business requirements.•Utilized Microsoft Azure cloud services and gained hands-on experience with security tools such as Microsoft Defender, Sentinel, Web Application Firewall (WAF), and O365 security features.•Demonstrated a strong understanding of cloud environments such as AWS, Azure, and GCP.•Recommended internal policies to meet compliance requirements, aligning them with ISO27001 (Information Security Management System) standards.•Raised risks within the Archer system and submitted risk forms for discussion in the Decision Change Meeting (DCM), ensuring accurate recording of risks in the risk register.•Supported the implementation of a Governance, Risk, and Compliance (GRC) tool, specifically One Trust, to facilitate vendor security assessments and Data Protection Impact Assessments (DPIA).•Conducted risk assessments for all services and evaluated the effectiveness of controls, implementing necessary risk mitigations.