Kaushik Kiran

About Kaushik Kiran

Transformational & strategic cybersecurity and technology risk executive delivering high-impact successful programs that elevate performance and improve comprehensive security posture.Passionate about operationalizing security and compliance best practices across a multitude of risk, governance, and regulatory models to drive innovation, business alignment; and identifying processes that assure information assets are adequately protected I offer a unique balance of technical depth, business acumen, and interpersonal skills delivering financial & organizational goals, developing trusted global teams, and building strong stakeholder relationships.Competencies - Fractional Chief Information Security Officer (CISO)- Identity and Access Management (IAM)- Vulnerability Management (VM)- Application Security (DevSecOps)- Cyber Threat and Security Operations (SecOps)- Cyber Asset Management- Security Governance, Risk, and Compliance (e.g, NIST CSF, 21 CFR Part 11, SOX 404, HIPAA, PCI DSS)- Information Security Controls (e.g, NIST 800x, SANS CIS CSC, HITECH, PCI DSS, ISO 2700x, CSA)- IT Compliance, Audit and Attestation (e.g, SOX 404, SOC1 / SOC2, IV & V, GxP Validation)- Enterprise Risk Management and Internal Controls (e.g, COBIT, COSO, CMM)- Privacy Requirements Compliance (e.g, EU General Data Protection Regulation (GDPR))- Cybersecurity Technologies and Analytics - Digital & Cloud Risk (e.g, Cloud Security Alliance, AWS Audit Program, GCP)- Data Classification, Data Leakage Prevention (DLP), IP safeguards- Strategic Planning and Budgeting- Agile Product, Program & Project Management (SAFe)- Business Process Risk Identification/ Optimization- Third and Fourth Party/ Vendor Risk Assessment & Management- IT Disaster Recovery and Continuity, Business Impact Assessment (BIA)- Staff Development & Retention

Experience

1. Head, Security Governance Risk & Compliance (Grc)

   HealthEquity

   Oct 2023 — Present · Pittsburgh, PA, US

Education

• Devi Ahilya Vishwavidyalaya

  MCA, Computer Science

• University of Pittsburgh Joseph M. Katz Graduate School of Business

  MBA, Strategy and Finance

Skills

• Governance
• IT Governance
• Compliance
• IT Audit
• Internal Audit
• Internal Controls
• Risk Management
• Enterprise Risk Management
• IT Risk Management
• Program Management
• Change Management
• Project Finance
• Business Process Improvement
• IT & Business Strategy Alignment
• Data Analytics
• Mergers & Acquisitions
• Sap Erp
• Sap Grc
• Sarbanes-Oxley Act
• Risk Assessment
• Auditing
• Sap
• Information Security
• Iso Standards
• Iso 27001
• Nist 800-53
• Nist Csf
• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Payment Card Industry Data Security Standard (Pci Dss)
• U.s. Title 21 Cfr Part 11 Regulation
• Eu Gdpr
• Ssae 16
• Vendor Management
• Project Management