Naresh Kumar Chauhan

About Naresh Kumar Chauhan

Bridging Security, Compliance & Innovation With over a decade of experience…

Experience

1. Sr Consultant Security Architect

   EY

   Jun 2018 — Present · Gurugram, IN

   Cybersecurity Advisory & Risk Assessment: Provide expert guidance to global clients on cybersecurity strategies, conducting regular risk assessments to identify and mitigate vulnerabilities in IT infrastructure.Security Architecture Design & Implementation: Develop and maintain robust security architectures across network, cloud, and application security domains, incorporating network security devices, and encryption protocols to safeguard against evolving threats.Security Policies & Compliance Alignment: Collaborate with clients to establish, review, and enhance security policies, procedures, and standards, ensuring alignment with GDPR, HIPAA, CIS, ISO 27001, and industry best practices.Security Audits & Configuration Reviews: Conduct comprehensive firewall audits, policy reviews, and log analysis, ensuring security configurations are optimized and aligned with compliance standards.Cloud Security & Risk Assessments: Perform security risk assessments for IaaS, SaaS, and PaaS environments hosted on Azure, AWS, and Oracle Cloud Infrastructure (OCI), identifying potential security gaps and implementing remediation strategies.Cloud Infrastructure & Security Controls: Extensive hands-on experience in Azure & AWS security, managing virtual machines, Advanced Threat Protection (ATP), DDoS mitigation, firewalls, VNETs, load balancers, and network monitoring tools to enhance cloud security posture.Threat Modeling & Secure Architecture Reviews: Perform threat modeling and security architecture reviews for SaaS, web, and infrastructure applications, mitigating risks before deployment.Regulatory Compliance & Governance: Ensure adherence to regulatory frameworks by implementing industry-standard security controls and continuous security posture assessments.Risk Identification & Mitigation: Identify, document, and track project-related security risks, prioritizing vulnerabilities based on impact assessment and likelihood, ensuring proactive mitigation strategies.