Dhruv Kuchhal

About Dhruv Kuchhal

I\'m a cyber security professional with 13 years experience of working in diverse cybersecurity leadership, strategy, transformation roles and domains. My areas of expertise include cyber security leadership, developing strategy and governance policies and procedures, conducting capability maturity and compliance assessments based on NIST (NIST-CSF, NIST 800-53 rev4, NIST FedRAMP), ISO, PCI, CMMC and CIS frameworks and benchmarks, data security and privacy frameworks such as HIPAA, HITECH, data governance frameworks such as GDPR and CCPA. I am also an experienced Identity and Access Management professional, having developed tools and conducted hands-on identity and access governance activities internally and for clients in finance, insurance, healthcare and technology industries.Having worked at multiple locations with a variety of teams, I try to bring a global mindset to the teams and projects I work on. Additionally, I hold a Masters degree from Columbia University in Electrical Engineering with a specialization in cybersecurity. I am also Certified Information Systems Security Professional (CISSP) and certified Azure Technologist.Aside from my professional commitments, I also provide security consultations related to cyber and data privacy laws (for US and global), cyber policies and security technologies for academic research.#cybersecurity;#information-security;#risk-management;#cyber-GRC;#GRC;#Governance-risk-and-compliance;#NIST;#cyber-maturity;#project-management;#program-management;##technical-program-management;#cyber-threat-assessment;#vulnerability-management;#incident-management;#risk-mitigation;#identity-management;#access-management;#access-governance;#identity-governance;#access-control;#data-governance;#third-party-vendor-risk-management

Experience

1. Team Lead - Cyber Governance, Risk & Compliance

   NuSummit Cybersecurity

   Jan 2024 — Present

   Serving as GRC lead for a major telecom services provider in managed services format. Leading a team of 4 persons. Driving a SOC 2 assessment and certification for a payment services applicationLeading TPRM assessments of the vendorsDriving day-to-day risk and compliance deliverablesDrove the re-design of IAM policies and processes in preparation of IAM governance up gradation

Education

• Manipal Institute of Technology

  B.E., Electronics & Communications Engineering

  2007 — 2011

• Columbia Engineering

  Master of Science (M.S.), Electrical Engineering

  2014