Kshitij Singh

About Kshitij Singh

I am an Information Security and Cyber Risk professional with hands on experience across ISO 27001, governance risk and compliance, data protection, and security operations. I am an ISO 27001 Lead Implementer Certified Professional, trained through BSI, and have worked on ISMS implementation, transition and recertification audits, risk assessments, internal and external audits, and control effectiveness evaluation. My experience spans people, process, and technology domains, including third party risk management, incident response, DLP, vulnerability assessments, and security awareness. I enjoy translating technical risks into business focused insights and working closely with stakeholders across IT, HR, Legal, and leadership to build practical and sustainable security programs. I am particularly interested in Cyber GRC consulting roles where structured frameworks, regulatory alignment, and business impact come together.

Experience

1. Information Security

   DS Group

   Jul 2024 — Present · Noida, IN

   Led PoCs for EDR, TPRM, WAF, SWG, People Security Management, and DLP tools, evaluating their effectiveness for enterprise security.• Implemented SOAR-aligned practices across SentinelOne XDR, Forcepoint DLP, and ContentKeeper, enhancing threat visibility, response time, and incident handling.• Automated policy enforcement and threat blocking at app, domain, and IP levels via SentinelOne and DLP to streamline endpoint and data protection workflows.• Collaborated with Managed SOC for Level 1 and 2 incident response, escalating critical threats to the CISO and coordinating triage and containment.• Support Managed SOC services by enabling log ingestion and connector setup for EDR, firewalls, switches, CUCM, and other infrastructure. Handle incidents raised by SOC partners, coordinate resolution across teams, and apply risk strategies like avoidance, acceptance, reduction, or transfer.• Contributed to ISO 27001:2013 to 2022 transition and recertification by implementing and revising controls as per updated standards.• Developed and updated policies on Threat Intelligence, Data Masking, Data Retention, and Secure Coding per ISO 27001:2022.• Supported internal and external audits through timely documentation and compliance tracking.• Conducted risk assessments and Business Impact Analysis (BIA) through asset classification and stakeholder engagement.• Oversaw VAPT activities with third-party vendors, managing stakeholder communication, vulnerability reporting, and remediation tracking.• Contributed to Digital Personal Data Protection Act (DPDPA) readiness by aligning practices with privacy regulations.

Education

• Maharaja Surajmal Institute Of Technology

  Bachelor of Technology - BTech, Information Technology

  2020 — 2024