Ranjeet Kumkar

About Ranjeet Kumkar

As a Senior Information Security Engineer at Infosys, I am part of the a Third Party Risk Management team, which operates under the Information Security Group (ISG) of Infosys. In this role, I focus on evaluating, monitoring, and strengthening the cybersecurity posture of vendors engaged with Infosys.My key responsibilities include:Vendor Security Assessment & Due Diligence: Handling security assessment tickets as part of the vendor onboarding process. This involves conducting thorough cybersecurity due diligence through structured questionnaires and verifying vendor compliance with globally recognized standards such as ISO 27001, SOC 2 Type II, and others. As part of the process, we also review the Master Service Agreement (MSA) between the vendor and Infosys, ensuring that appropriate ISG (Information Security Group) Clauses are included based on the category of vendor as defined by Infosys’s internal policies.Risk Identification & Tracking: Maintaining and updating the Vendor Risk Register to document and manage risks associated with individual vendors. Annual Vendor Assessments: Performing regular, formal reviews of vendors’ cybersecurity controls to ensure continuous alignment with Infosys\'s security requirements. This includes the evaluation of updated security certifications and detailed analysis of Vulnerability Assessment and Penetration Testing (VAPT) reports.Tool-Based Governance: Using RSA Archer to maintain vendor inventories, automate workflows, and record risk assessments. This helps ensure consistency, auditability, and transparency in all vendor-related security activities.Attack Surface Monitoring: Utilizing BitSight for continuous Attack Surface Monitoring to assess the external security posture of vendors. I generate detailed reports, share findings with vendors, and maintain structured action trackers to ensure timely remediation of identified risks.Through these responsibilities, I contribute to establishing and enforcing a robust vendor security framework that aligns with Infosys’s overall information security strategy and compliance objectives.

Experience

1. Senior Information Security Engineer (Information Security Compliance) - Tprm

   Infosys

   May 2025 — Present · Pune, IN

Education

• Centre for Development of Advanced Computing (C-DAC)

  Post graduate Diploma In Advanced Computing (PG-DAC), Computer Science

• Marathwada Mitra Mandal's College of Engineering, Pune

  Bachelor of Engineering - BE, Electrical Engineering