Mohd Umar Umar Farookh

About Mohd Umar Umar Farookh

CTO/ CISO with over 20 years of experience engineering high-integrity IT infrastructures expert in Governance, Risk, and Compliance (GRC), aligning organizational security with business growth through ISO 27001 lifecycle management, Secure SDLC, and enterprise IAM. Adept at managing multi-office hybrid infrastructures while translating threat intelligence and risk frameworks into board-level risk mitigation strategies.* Security Strategy, Risk Management, GRC Compliance Oversight, Incident Response Management.* Security Architecture, Budget, Resource Management, Supply Chain Risk Management.* Board Communication, NIST CSF 2.0, RMF, COBIT, ITIL Alignments Risk,DPDPA, GDPR, PCI-DSS.* Zero Trust Architecture / IAM / RBAC, Secure Asset Management, SIEM Management.* ISO 27001, ISO CIS Control, AWS Solutions & Security, Microsoft Sentinel.* ITGCs, ITACs & ICFR.* SOX, NHS Digital & DSP Tool Kit.* Asset Lifecycle Security.

Experience

1. CTO CISO

   World Scrap Recycling Solutions Pvt. Ltd

   Aug 2016 — Present · Tirupati, IN

   Built a supply chain governance framework aligned with NIST CSF 2.0 and CIS Control 15, improving vendor management and risk processes.• Led ISO 55001/55002 IT asset management for 380+ staff, introducing GPS logistics and secure data sanitization at a major ITAD facility.• Led organization-wide GRC/IRM programs, aligning controls with NIST CSF 2.0 (including GOVERN), NIST RMF, ISO 27001:2022, COBIT 2019, and ITIL 4.• Managed ISO 27001 ISMS as a certified auditor, handled SoA documentation, conducted riskassessments, implemented treatment plans per ISO and achieved clean audit results with zero nonconformities.• Ensured compliance with SOX-equivalent controls, enforced Segregation of Duties, and conducted quarterly User Access Reviews.• Complied with GDPR Article 5 and India DPDP Act 2023, addressing consent, data rights, fiduciary duties, breach notifications, and parental consent.• Conducted security risk assessments using NIST and ISO standards for various systems and vendors.• Managed enterprise risk registers in ISO format and provided quantified board-level risk statements.• Delivered quarterly CISO reports translating cyber risks into business terms, aligning with key governance frameworks.• Led CIS Controls v8 implementation from IG1 to IG2, covering asset inventory, data protection, access management, vulnerability management, audit logs, and incident response across all 18 controls.• Managed hybrid cloud infrastructure (AWS, Azure) with ITIL 4 practices, including Incident, Problem, and Change Management.

Education

• CH. Charan Singh University

  Master’s Degree

  2014 — 2016

• ESTC-ACEL(UNDP, Govt. Of India)

  Advanced Diploma, Computer System Networking and Hardware, Microprocessors, Analog & Digital Electronics

  2007 — 2008

• ESTC-ACEL(UNDP, Govt. Of India)

  Advanced Certificate Course, Analog & Digital Electronics

  2007 — 2008

• CH. Charan Singh University

  Bachelor’s Degree, English Language and Literature/Letters