Sid Kumar Email & Phone Number

Pompano Beach, Fl, Us

Irvine, Ca, Us

Design and develop an Enterprise Security Architecture to mitigate the risks presented by the ever-changing threat landscape unique to the organization.Ensure that secure architectural solutions are incorporated into every aspect of enterprise architecture supporting the organization’s key business processes and organizational missions.Evaluate enterprise security infrastructure and ensure the disparate components are well integrated, secure, and operating efficiently.Translate technical risk issues and distill such issues to IT and business leaders.Engage in the initial requirements definition (including analysis of threats and risks and alignment with security engineering, IT and Architecture standards).Sets strategic direction for information security initiatives, processes and standards.Build relationships and collaborate with other architects across IT to ensure all visions are aligned.Create, refine, deliver, and evangelize information security standards to be used throughout the enterprise that balance business needs and security requirements.Work with external security partners, lead the technical investigation and analysis of their security solutions, and present the results to the Chief Information Security Officer.Partner with IT teams to ensure that security architectures support compliance (PCI DSS, NIST, HIPAA, GDPR, SOC, etc.), customer and operational requirements for all Alorica services and products.Manage, coach and mentor the team to become an efficient member of a result driven team and grow professionally and personally

Greenfield, In, Us

• For the Cloud migration Assessed, designed, implemented security solutions leveraging Microsoft Azure and other third-party solutions• Provide strategic direction for migration of cloud workloads, infrastructure, business units, business processes and external suppliers for information security risks, identify the potential threats and exposures• Used Azure Benchmark (CIS) and NIST Cybersecurity framework recommendation and Azure best practices for assessments and designing of the security controls• Conduct security architecture reviews of planned cloud migration initiatives across the organization and produce high quality Threat models for cloud environments clearly articulating risks

Richardson, Texas, Us

Lead for Managed security services and central point of contact for client’s Cyber Security team onsite.Identifying security-related deficiencies in existing and proposed security architecturesArchitecting and directing implementation of technical security solution and policies in alignment with business riskEngineering, Maintenance, Operations and Support of the Security tools and infrastructure. o multifactor authentication and single sign on using a IDPo Web proxy (Providing URL filtering implementations)o Handling and implementation of web URL filtering requesto PCI compliance tool for file integrity monitoring and promotion of changeso SSL certificate Creating and distributiono log aggregations and Security and Incident and Event management (SIEM) toolo Antivirus managemento Secure Password storage and managementPrepares and maintains technical Knowledge Articles, SOPs, security architecture documentation and diagramsVulnerability Assessment of web applications and IT infrastructure, Validations and providing Remediation solutions and coordinating fixesInterface with the Client and off shore team in managing the Security tools and infrastructure of the retail client.

Houston, Tx, Us

Frankfurt Am Main, Hessen, De

AVP & Cyber Security, IT Security and Risk OfficerI have made significant Value Addition to Deutsche Bank in the role by: - Partnering with the business to understand the Information Security and Risk requirements and challenges to provide strategic and tactical Security solutions and services- Providing design assistance and driving adoption of Enterprise Security Reference Framework (ESRF) to build a layered defense for the Protection of the personal and sensitive Bank data. The ESRF is build on the 3 main pillars of People, Processes and Technology- Providing support for Regulatory Compliance- Providing deep insight, expertise and specialized security skills in Data classification (CIA Risk and impacts ) and Protection of Data at Rest, In Use and Data in Motion- Managing Information Risk Assessment- Driving Data Protection and Data Leakage Prevention (DLP)- Conducting Assessment of Bank’s IT Security Posture- IT Security Incidence Management (Cyber Security Incidence Analysis & Response)- Managing Mobile Storage Device(MSD) control - Managing Web Upload Control(WUC)- Conducting CBISO mappings for MSD and WUC (this is for other process like dbras as well) - Providing Reports for Super Exception, Ad-hoc Requests and InvestigationsLeveraged my deep expertise in:• Cyber Security and Information Technology Security• Information Classification and Handling• Data Privacy, Data Protection and Data Leakage Prevention (Data at Rest, In Use and Data in Motion) • Data Governance and Management• Risk Management• User Access and Authentication• User Education and Training• Project Management

Quality Assurance Management• Manual and Automation testing, Designed and executed test cases, Used Winrunner, Test Director, LoadRunner• Deployment and Release of web application: Autobahn FXplus

Casale Sul Sile - Treviso, Tv, It

Application development :Internet web based Application and Client server Apps (Hospital Management, e-HR tool) Used JSP,HTML, XML, ASP, SQL Server, Oracle

Master'S Degree, Management Information Systems, General

Bachelor Of Engineering - Be, Computer Science

Education record

Master'S Degree, Management Information Systems, General