Ashish Dash

About Ashish Dash

Ashish is currently serving as a Manager in the Data Privacy and Ethics team within the Cybersecurity Strategy and Governance function of Digital Trust practice at KPMG India. With over 7 years of experience in Data Privacy and Information Security domain consulting, he possesses extensive knowledge of global privacy laws and acts, including GDPR, DPDPA, CCPA, PDPL, EU AI Act and more. Ashish has demonstrated a proven track record across various business sectors, including, Information Technology, Oil and Energy, Electronics and Electrical, Manufacturing, e-Commerce, Banking and Finance, Mass Media and Entertainment, and others. Ashish specializes in Data Protection and Privacy Risk Management, Cyber and IT Security, IT Security Risk Management, Third-party Risk Management, IT Security Systems External Audit and IT Attestation/ Assurance. His experience and expertise makes him an asset in mitigating privacy risks to ensure compliance in the ever-evolving legal and technology landscape of data privacy and cybersecurity.

Experience

1. Manager

   KPMG India

   Jun 2019 — Present · Bengaluru, IN

   Ashish has provided management and advisory services to various organizations for identifying and assessing the current state of an organization\'s privacy and security controls to ensure compliance with global privacy laws and regulations, as well as for designing, implementing, and monitoring the controls needed to achieve the desired state- Ashish assisted a leading mass media and entertainment firm in implementing One Trust as its PET, establishing an unified consent and preference management platform to comply with GDPR, CCPA and DPDP Act. The implementation facilitated the capture of first-party data for personalized content and ad delivery, involving closed collaboration with Legal and Compliance, IT Security, Engineering and Product Development, and Business Process teams- Ashish assisted a digital service provider in managing their Enterprise IT cybersecurity posture, ensuring all digital assets, including applications (web/ mobile, IOT), platforms, and APIs, comply with the security and privacy requirements by default and design. He was primarily responsible for identifying and assessing the current privacy and cybersecurity posture of their digital assets and designing, implementing and monitoring privacy and security controls based on IS0 27001, EU GDPR, NIST CSF, NIST SP 800-53, PCI DSS and others to streamline risk identification, mitigation and acceptance strategies.His efforts covered assessment over 300 plus digital assets across the EMEA region, which included both 200 plus legacy assets and 100 new assets- Ashish has conducted independent data protection risk assessment for organizations subject to EU GDPR, DPDP Act, PIPL China, PDP Law Indonesia, CCPA, and others of over 150 applications/ platforms/ APIs. His responsibilities included designing and reviewing DFDs, preparing DPRs/ Privacy Notices/ DSR mechanisms, performing TIAs/ LIAs, conducting DPIAs, developing and maintaining internal Privacy Policies/ Procedures/ Training modules.

Education

• Pandit Deendayal Energy University

  Bachelor's Degree, Petroleum Engineering

  2010 — 2014

• Delhi Public School, Dwarka

  High School

  2003 — 2010

• DoMS, IIT Roorkee

  Master of Business Administration - MBA, Finance

  2017 — 2019

Skills

• Autocad
• Well Testing
• Production Optimisation
• Reservoir Simulation
• Upstream
• Production Engineering
• Formation Evaluation
• Petroleum Engineering
• Well Logging
• Directional Drilling
• Reservoir Engineering
• Drilling Engineering
• Horizontal Directional Drilling