Kuldeep

SUMMARY

• Kuldeep brings over 10 years of experience in information security, data privacy, governance, and risk management, with strong academic credentials including a Master’s in Information Security from IIIT Allahabad.
• Possesses deep technical expertise in implementing and auditing international security and compliance frameworks, such as ISO 27001, ISO 27701, ISO 22301, ISO 27017, NIST CSF, NIST SP 800-53, GDPR, COBIT, PCI-DSS, CMMC, and OWASP Top 10.
• Leads and executes information security governance programs, ensuring alignment with regulatory standards and business objectives.
• Experienced in cybersecurity audits and gap assessments, including vendor risk management, third-party assessments, and audit readiness.
• Conducts security maturity evaluations, defines security KPIs, and prepares cybersecurity capability and compliance reports for executive stakeholders.
• Facilitates policy design, control mapping, and risk mitigation strategies, ensuring scalable and compliant security operations.
• Drives ISO 27001 and GDPR compliance initiatives end-to-end, including risk treatment planning, asset inventory, and business impact analysis.
• Designs and delivers security awareness programs and technical workshops across domains like CISA, CISM, CRISC, CGEIT, and CCISO, empowering professionals to align with global standards.
• Adept at deploying Security Information and Event Management (SIEM) systems and SOAR platforms to strengthen incident detection and response.
• Supports Business Continuity and Disaster Recovery (BCDR) planning, documentation, and test execution for critical systems and data.
• Guides organizations in building integrated controls frameworks (ICF) that unify diverse compliance requirements into cohesive security strategies.
• Strong background in vulnerability assessments and remediation planning, ensuring continuous risk reduction across IT infrastructure.
• Maintains a consulting approach rooted in metrics-driven governance, continuous improvement, and cross-functional collaboration.

SKILLS

• Information Security Management
• Data Privacy Compliance
• Governance and Risk Management
• Security Auditing
• Standards and Frameworks Implementation
• Training and Certification Workshops
• Regulatory Adherence
• Security Solution Development
• Vulnerability Assessment
• Security Orchestration, Automation, and Response (SOAR)
• ISO 27001 Implementation
• NIST Cybersecurity Framework (CSF)
• PCI-DSS Compliance
• GDPR Compliance
• Integrated Controls Framework (ICF)
• Security Information and Event Management (SIEM)
• Business Continuity and Disaster Recovery (BCDR)
• Vendor Risk Management
• Cybersecurity Capability Assessments
• Security Metrics and Reporting

CERTIFICATIONS AND FRAMEWORKS

related courses

Certified Data Privacy Solutions Engineer (CDPSE) Online Training & Certification Course

Certified in the Governance of Enterprise IT (CGEIT) Online Training & Certification Course