Pawan Kumar

About Pawan Kumar

a) A seasoned Information and Cyber Security professional with more than 20 years of experience in Information and Cyber Security, OT security, M&A Advisory, Cloud Security, Privacy and Data Protection, Risk and Compliance. b) Led and successfully delivered numerous engagements in the areas of information and Cyber security, Security assessments, Solution designing, management consulting and security governance. Pawan possess industry leading certifications like CISSP, CCSP, CISA, BS10012, CEH, ISO 27001 LI, ITIL and many more. c) Helped clients identify and mitigate Cyber and Data Security Risk’s around people, process and technology. Technology solutions/controls leveraged for tech risk mitigation includes NextGen Firewalls, PAM, WAF, Data leak prevention (DLP), EDR, Data Discovery and Classification, Data Encryption, CASB, Information Rights Management (IRM) etc. d) Help clients on Privacy and Data Protection requirements as per GDPR and Draft Data Protection Bill of India. e) Business and Client development, Respond to RFP / RFIs, Proposals, End to end project life cycle management. Experience in working with both Corporate and Public Sector clients.f) Risk assessment, Gap analysis, development and implementation of security policies, processes, procedures, standards and guidelines (IT governance frameworks).g) Development of Information and Cyber security strategies and frameworks plans based on generally accepted security standards and guidelines like NIST, ISO 27001, SANS, OWASP, CERT-In, NCSP etc.h) Client, vendor and team management, project planning, monitoring and management. Key Skills:Information and Cyber Security strategy, Security Governance and management, Security Architecture development and implementation, NIST CSF, Cloud Security, Privacy and Data Protection, BS10012, Vulnerability Management, ISO 27001:2013, DLP, Data Classification, Risk and Compliance, Management Consulting, Risk Assessment, ISMS Implementation, Cyber Strategy and Roadmap Development, Security Policy and process development, Business Development, Project Management, Client management, Vendor management.

Experience

1. Cybersecurity Lead at Eygds- Sat m & a

   EY-Parthenon

   Dec 2021 — Present · Noida, IN

   Helping clients identify, prioritize and mitigate technology risks in M&A transactions Buy side and sell side Cyber Due diligence and Red flag assessments for Private Equity (PE) and Corporate clients during the Merger & Acquisition (M&A) Transactions Cloud security, vulnerability management, Cyber strategy, Risk / Gap assessment, Cyber Maturity assessment, Opensource threat intelligence Working as Trusted advisor to business & technology leaders by helping them embed security in their Digital transformations Current State Cyber Security Assessment based on leading frameworks such as NIST CSF, NCA (KSA), NIS2 (EU), CIS controls, and ISO 27001 Development of Cybersecurity strategy aligned with business strategy. Develop Security Roadmap for Security leaders /CISOs highlighting new security initiatives, timelines, cost, effort, dependencies involved Supporting global clients throughout the Deal life cycle to securely onboard / separate entities. Support in Integration / separation planning, Day 1 planning, One time /run time cost (OTC) calculation, TSA exit support, Zero Trust based secure access separation support in sell & separate M&A deals. Target Operating Model (ToM) for Cybersecurity / CISO function

Education

• Kurukshetra University

  MCA, Computer Application

  2002 — 2005