Gaurav Bhatnagar

About Gaurav Bhatnagar

A seasoned cybersecurity professional having more than 22 years of experience in ensuring and managing IT Infrastructure, IAM, PAM, EDR, SIEM, EMM, Information & Cyber Security, Cloud Security, Application Security, GRC, IT Security controls, Network and System hardening, ISMS Audits, SOC 2, IT SOX Testing, Control testing, ISO 27001 Implementation and Audits, Setting up technical controls and auditing GDC etc.I\'m passionate about creating a secure digital environment and promoting a culture of security awareness within the organization. I believe that effective security is a collective effort and requires the participation of every team member. In my current profile as Associate Director -Information Security & Audits (ISO -India & ME), I am overseeing:1. Management of information and cyber security, IT risk, compliance, and Security for all India and Middle East operations.2. Management of Enterprise Security Tools like EDR, SIEM, Firewall, PAM, Intune, EMM etc.3. Planning and launching phishing tests.4. Management of internal audit and certifications for ISO 27001 and SOC2 at all offices in India and the Middle East.5. Responsible for Vulnerability Management for all India and ME offices.6. Management of BCP/ DR and execution of BCP/ DR test for India and ME.7. Management of Information Security Risk for India and ME Offices.8. Management of the client\'s, vendor\'s, or third-party risks and handing TPRM audits. Management of network, application, and system security.10. Management of Information Security Training and Compliance.11. Conducting and planning phishing campaigns; and information security and privacy awareness quizzes.12. Management of various compliance and standards (ISO 27001, SOC 2 Type 1 & 2, GDPR, HIPPA, ITGC, ITAC, ITIL, SOX, PCI DSS, Cloud Security, etc.)13. Responsible for discussion and approval of client legal agreements like MSA, NDA, SOW, SLA etc related to confidentiality data privacy and protection.14. Management of Security Operation Center.15. Formulation and implementation of ISMS policies and procedures.16. Reviewing and creating the ISMS policies on a regular basis.17. Managing information security incidents.18. Management and enforcement of privilege access management.19. Management of Supplier Risk Management.20. Planning an information security strategy for the organization.etc.

Experience

1. Senior Manager

   Protiviti

   Jan 2023 — Present

Education

• Delhi University

  Bachelor of Science (B.Sc.)

  2001 — 2004

• National Institute of Electronics and Information Technology (NIELIT)

  A LEVEL NIELIT

• Annamalai University

  Master of Science (M.Sc.)

  2005 — 2007

• NATIONAL INSTITUTE OF ELECTRONICS & INFORMATION TECHNOLOGY (NIELIT)

  Web App Using APACHE, PHP & MYSQL

  2020 — 2020

• Bhartiya Vidya Bhavans Sardar Patel Institute of Technology Munshi Nagar Andheri Mumbai

  Master of Business Administration (M.B.A.)

• Indira Gandhi National Open University

  ADVANCE CERTIFICATE IN INFORMATION SECURITY

  2018 — 2019

• Gandhi Memorial Sarvodaya Vidyalay Shahdara Delhi

  SCIENCE