Amit Kumar

About Amit Kumar

Seasoned Information Security Professional with expertise in Information Security Risk Assessment, Risk Management, Third-Party Risk Management, Internal/External audit, Business Continuity, and Data Privacy. Managed end-to-end projects for industry in Banking, Energy, Petroleum, Healthcare, and Technology sectors to help them cast their information security posture by assessing information security risks, forming information security policies, and developing risk mitigation strategies.Specialties-[+] Over 10 years of work experience mostly in the field of Information Security Management & Governance and IT Risk Management. Have worked with global organizations covering the Technology and BFSI domains.[+] Instrumental in leading and managing key security projects around industry regulations, information security governance, data protection and DLP, incident management, cloud security, IAM, risk assessments, policy implementations, and controls enhancements, DevSecOps, and others.[+] Successfully managed Third-Party Risk Management program for Financial, HealthCare, and Technology clients ranging from small institutions to institutions of over $40B total assets.[+] Designed comprehensive (people, process, technology) Third-Party Risk Management solutions trimmed down to organization requirements.[+] Designed Vendor Attack Surface Discovery product and Services for the company from scratch using Open Source Intelligence (OSINT) Framework.[+] Reviewed third-Party controls and processes based on ISO27001 | ISO22301 | | PCI-DSS | SOC1 | SOC2 | NIST| FFIEC | HIPAA | FedRAMP| DFARS| SOX and performed security GAP Assessment.[+] Helped the company in designing 360 views of their Vendor Security - Inside-Out and OutSide-In view.[+] Experienced in using several TPRM & GRC tools, including Archer, Processunity, Erumba, VISO Trust, SecurityScorecard, One Trust, Panorays, and more.[+] Manage implementation and adoption projects; develop project plans and milestones, collaborate with customers and internal teams, track and report on progress, and identify and escalate issues and challenges.[+] Experienced in performing and leading Infrastructure/Web-Application/Network/Mobile App Vulnerability Assessment and Penetration Testing Exercises.[+] Experienced in configuring and deploying real-time event monitoring tools, Wazuh, ELK Stack, DLP, and IRM solutions.ISO 27001 LA | CISM | PCI DSS-i | OSCP | AZ 500

Experience

1. Vice President (VP), Information Security and Business Information Security Officer (Biso)

   Fortrex Technologies

   Apr 2025 — Present

Education

• Gaya College, Gaya

  Bachelor’s Degree, computer applications

  2010 — 2013

Skills

• Networking
• Vulnerability Management
• Payment Card Industry Data Security Standard (Pci Dss)
• Firewalls
• Application Security
• Breach Investigation
• Network Security
• Computer Security
• Phishing
• Pci Dss
• Information Security
• Malware Analysis
• Security
• Iso 27001
• Threat Modeling
• Web Application Security
• Ips
• Penetration Testing
• Wireless Penetration Testing
• Web Application Security Assessment
• Information Security Management
• Nessus
• Security Operations Center
• Vulnerability Assessment
• Security Analysis
• Metasploit
• Tcp/Ip
• Ceh
• Seminar Speaker
• Pci-Dss