Kishore C.

About Kishore C.

As a Cloud Security Architect with 14+ years of experience, I specialize in designing and…

Experience

1. Sr Cloud Security Architect

   Amazon Web Services (AWS)

   Jan 2021 — Present · US

   Design and implement cloud security architectures aligned with industry best practices and organizational requirements.Develop security frameworks for public, private, and hybrid cloud infrastructures.Conduct risk assessments to identify vulnerabilities within cloud environments and implement effective mitigation strategies to manage and reduce risks.Collaborate with stakeholders to develop cloud security strategies that align with business objectives.Deploy and manage security controls such as firewalls, intrusion detection systems (IDS), and encryption technologies.Ensure compliance with industry standards including ISO 27001, SOC 2, and GDPR.Implement and manage AWS Control Tower for centralized governance and oversight of multi-account environments, configuring controls and guardrails that support HIPAA compliance, including data encryption and access management.Develop, enforce, and update HIPAA-compliant security policies to protect Protected Health Information (PHI).Regularly review cloud architectures to maintain compliance with HIPAA regulations and internal security policies.Document and update security guidelines to reflect infrastructure changes and regulatory updates specific to HIPAA.Collaborate with DevOps and engineering teams to integrate security measures that meet HIPAA requirements throughout development lifecycles, promoting secure coding practices and securing CI/CD pipelines.Develop and maintain incident response plans tailored to HIPAA regulations, addressing potential PHI breaches.Lead investigations and coordinate responses to cloud security incidents to ensure minimal impact, swift recovery, and proper reporting in line with HIPAA standards.Implement continuous monitoring tools to detect potential security threats, ensuring adherence to HIPAA auditing requirements.Conduct regular audits and penetration tests to validate the effectiveness of security measures with a focus on HIPAA compliance.