Kartikeya

SUMMARY

• Brings over 20 years of expertise in cybersecurity, AI governance, and data protection, with a strong focus on risk management, data governance, and regulatory compliance.
• Specialized in GDPR readiness, privacy assessments, and BCR compliance, delivering large-scale privacy frameworks for multinational organizations.
• Led national programs in cyber insurance, cyber risk, and digital trust transformation, strengthening enterprise resilience.
• Directed AI/ML-driven high-tech assurance offerings, advancing automation and digital assurance for next-generation enterprises.
• Served as DPO support for global privacy officers and acted as DPO for leading IT services firms, ensuring compliance with GDPR, HIPAA, PIPL, and US state laws.
• Proven track record in GRC transformations as Product Owner for ServiceNow and MetricStream, with hands-on experience in IRM, risk sensing, and operational risk monitoring.
• Built and scaled privacy and cybersecurity practices aligned with ISO 27001, ISO 27701 PIMS, and ISO 29100, delivering internal and external audits, SOC Type 1/2, HiTrust, and SOX/J-SOX assessments.
• Directed third-party audits, vulnerability assessments, and ITGC reviews, ensuring robust internal control systems for clients in financial services, petrochemical, and technology sectors.
• Designed and implemented Zero Trust frameworks and advanced data protection strategies, integrating privacy by design into enterprise systems.
• Extensive experience advising on global regulatory compliance including GDPR, DPDP Act, PIPEDA, PCI DSS, and cross-border data transfers.
• Developed privacy and cybersecurity thought leadership and training programs, enabling enterprise-wide awareness and workforce upskilling.

SKILLS

• Data protection, GDPR readiness, and privacy frameworks
• AI governance, responsible AI, and digital risk transformation
• Enterprise risk management and GRC transformation
• Cybersecurity resilience and Zero Trust architectures
• Regulatory compliance (SOX, J-SOX, HiTrust, HIPAA, DPDP Act)
• ISO frameworks: ISO 27001, ISO 27701, ISO 29100
• Risk analytics, risk sensing, and vulnerability management

Certification Frameworks