Chandra Prakash Mani

About Chandra Prakash Mani

I am a Cybersecurity & Risk Specialist with 12+ years of experience in Risk Assessment, GRC, Information Security Governance, Cloud Security, and Third-Party Risk Management.Currently working at KPMG Global Services, I support global clients across BFSI, Healthcare, Tech, Manufacturing, and Energy sectors by designing secure controls, assessing risk posture, and ensuring compliance with leading frameworks such as ISO 27001, NIST CSF, SOC 2, GDPR, and internal governance standards.Key Strengths: Enterprise Risk Assessments GRC Implementation (ISO 27001, SOC2, NIST) Vendor/Third-Party Risk Cloud Security Control Assessment & Governance Vulnerability & Threat Analysis Stakeholder Engagement (CXOs & global teams) Policy, Process & Playbook DevelopmentI have conducted over 200 enterprise risk assessments and contributed to strengthening cybersecurity posture for multiple global organizations.I am always open to collaborating on global cybersecurity and risk initiatives to help organisations improve governance, reduce risk, and enhance security maturity.

Experience

1. Assistant Manager

   KPMG India

   Dec 2024 — Present

   Risk Assessment & Mitigation: Evaluate and mitigate risks in business operations, cybersecurity, and third-party relationships, ensuring global compliance. • Threat & Impact Assessments: Conduct risk scoring based on likelihood and severity using quantitative models, risk matrices, and AI-driven analytics. • Comprehensive Risk Analysis: Assess operational, regulatory, financial, and IT risks, prioritizing business-critical threats. • Third-Party Risk Management: Review vendor contracts, supplier agreements, and outsourcing risks, ensuring compliance with KPMG policies, ISO 27001, NIST, GDPR, and SOC 2. • Vendor Due Diligence: Perform risk-based due diligence for vendor onboarding, identifying security gaps and ensuring compliance with contractual obligations. • Data Security & Governance: Analyze Information Protection Schedules (IPS) to identify risks and strengthen governance controls. • NITSO & ATO Compliance: Secure NITSO (Network & Information Technology Security Office) approvals for Authority to Operate (ATO) and reassess risks upon expiration or severity changes. • Cybersecurity Risk Evaluation: Assess cloud security (AWS, Azure, GCP), zero-trust frameworks, IAM, and data privacy risks to strengthen enterprise security posture. • Regulatory Compliance & Risk Mitigation: Develop risk mitigation strategies aligned with ISO 27001, NIST, SOX, HIPAA, PCI-DSS, and DORA. • Business Continuity & Resilience: Conduct Business Impact Analysis (BIA) and resilience planning, aligning risk assessments with disaster recovery (BCDR) strategies. • Risk Monitoring & Reporting: Prepare risk reports, dashboards, and compliance documentation for audits, regulators, and senior leadership. • Cross-Functional Collaboration: Work closely with internal teams, auditors, and regulators to embed risk management into business operations.

Education

• Muthyammal engineering college

  Bachelor of Technology (B.Tech.), Information Technology

  2009 — 2013