Mohit Mehta

About Mohit Mehta

Over 23 years of experience in management systems such as business continuity, information security, risk management, cyber security, data protection, privacy, NIST 800-53 CSF, HIPAA compliance, PCI DSS, GDPR, quality management, IT service management, IT policies, 3rd party assurance reports such as ISAE 3402 (SOC1), SOC 2 Type I, Type II, managed services, technical management, people management, IT service management, project management, vendor management. Global management experience managing local and international teams (EU, APAC, and Latin America) with the right mix of management and technical skills, providing strategy, leadership, and communication at all levels. Possessing a valid B1/B2 visa to the United States. I am currently the Global Head of Audit & Compliance for Getronics\' Security Tower, where I am in charge of the Business Continuity Management System (ISO 22301:2019), Information Security Management System (ISO 27001:2013), Quality Management System (ISO 9001:2015), IT Service Management (ISO Environment Management System (ISO 14001:2015), Internal IT audits, SSAE 18, ISAE 3402, SOC1, SOC2, Type I and Type II, Data privacy, ESG. I oversee 14 country locations, including the United Kingdom, Europe, Asia, and Latin America, as well as 50+ operational sites. I am currently a Certified Information System Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Lead Implementer Professional ISO 22301 Business Continuity Management, ISO 27001 Information Security, Lead Auditor ISO 27001, ITIL 2011 Expert certified, and PMP certified professional.

Experience

1. Global Head of IT Audit & Compliance

   Getronics

   Jul 2019 — Present · Gurgaon, IN

   In my current position, I am in charge of the Global IT Audit & Compliance team. Managing the Company\'s ISO-compliance management systems ISO 27001, 9001, 22301, 14001 & cyber security, data protection, privacy, NIST 800-53 CSF, GDPR, enterprise risk management, 3rd party assurance reports such as SOC 1/2, ISAE 3402 with responsibility for liaising with accredited 3rd party assessment bodies, managing the internal audit programmes and management review processes, process development, and actively participating in operational processes such as continual improvement, complaints handling, risk management, ESG program.\\\\n\\\\n• Serving as the global team\'s expert advisor in the development, implementation, and maintenance of business continuity, quality, information security, and global IT security policies and standards.\\\\n• Advising Board Management on risk issues pertaining to information security and business continuity, as well as making recommendations in support of the company\'s overall risk management programme.\\\\n• Oversee the company\'s compliance initiatives, such as SSAE 18, ISAE 3402, SOC1, SOC2 type I and type II reports, HIPAA, PCI DSS, and GDPR;\\\\n• Conduct disaster readiness exercises for Indian and EU functions; and establish a building evacuation programme.\\\\n• Increase global awareness of business continuity and IT Security and emergency response through conducting seminars in Europe and India.\\\\n• Create key performance indicators (KPIs) or metrics to assess the performance of management systems.\\\\n• Contract management for customers and support for new bids.\\\\n• Supplier evaluation and compliance audit.\\\\n• Data Protection and privacy programme.\\\\n• Conduct internal audits to identify significant process gaps, communicate best-in-class business processes, and potential areas for improvement.\\\\n \\\\n\\\\n \\\\n \\\\n\\\\n \\\\n

Education

• Delhi University

  Bachelor of Commerce (B.Com.), Business/Commerce, General