Raghav Handa

About Raghav Handa

Senior Manager with 13+ years of experience into Cyber Security.B.Tech in Computer Science Engineering.Certified ISO/IEC 27001:2022 Lead Auditor, CIPP/E, ISO/IEC 27001:2013 Lead Auditor, CEH v7, ITIL V3 Foundation, AWS Cloud Practitioner.Expertise in implementing, maintaining and continually improve ISMS as per ISO/IEC 27001:2013, performing risk assessment, conducting ISMS & ITGC audits, compliance reviews, conducting awareness sessions, responding to client questionnaires.Evaluating the Security Maturity and Security Metrics of various security areas/domains.Implementing Integrated Compliance Matrix comprising of various standards and IT acts and regulations.Documenting security policies, procedures and templates, managing IT risk and compliance, implementing and testing BC & DR plans, supporting Internal and external compliance audits, and conducting application security testing & vulnerability assessment.Worked in various security processes like Identity & Access Management (User ID Validation, User ID Management, Shared ID Validation, Dormant ID Validation), Vulnerability Assessment, Security Health Check, Inventory Management.Worked onsite on Identity & Access Management.Hands on experience of various security standards/regulations/frameworks like NIST CSF, GDPR, CIS, HIPAA, PCI DSS, etc.Knowledge on various security tools like Nessus, ISS Site Protector (VA), Cyber Ark (Shared ID Management), Maximo (Inventory Management), Eventlog Analyzer (SIEM), TrendMicro DLP, Symantec VIP (Dual Factor Authentication), OpManager & PRTG (Capacity Management).Experience in implementing and/or managing ISMS in Telecom, Retail, Healthcare, Insurance and Automobile industries.

Experience

1. Senior Manager

   Motherson Technology Services

   Apr 2024 — Present · Noida, IN

Education

• Guru Gobind Singh Indraprastha University

  B.Tech, Computer Science

  2007 — 2011

• L.V.M. Sr. Sec. School

  High Secondary, Physics, Chemistry, English, Maths, Computer Science

  1994 — 2007

Skills

• Service Delivery
• C++
• Oracle
• Risk Management
• Team Management
• Identity & Access Management (Iam)
• Information Security Management
• Mysql
• Network Security
• Html
• Javascript
• Information Security
• Databases
• Isms
• Jsp
• Microsoft Office
• Analysis
• Sql
• Asp.net
• Security
• Iso 27001
• Governance
• Identity Management
• Incident Management
• Core Java
• Vulnerability Assessment
• Penetration Testing
• C
• Java
• Inventory Management
• Servers
• Itil
• Management
• Risk Assessment
• Issue Management
• Access Control Management
• Sap
• Operating Systems