Subodeep Ray
Senior Cloud Security & Risk Consultant - Associate Manager @EY
Signup · Get unlimited contacts
WORK HISTORY
Senior Cloud Security & Risk Consultant - Associate Manager @EY
Led end-to-end multi-cloud (AWS, Azure, GCP) migration and post-migration enablement, including cloud and cybersecurity assessments,security framework implementation, application security reviews, FinOps optimization, SDLC integration, and SME support.Conducted cloud security and cybersecurity risk assessments aligned to ISO 27001, GDPR, HIPAA, PCI-DSS, NIST CSF, and CIS Benchmarks, delivering prioritized remediation roadmaps. Performed threat modeling and cybersecurity assessmentsfor cloud workloads, SaaS integrations, and APIs,identifying architectural, configuration, and control gaps.Designed and implemented secure multi-cloud architectures aligned with CIS, NIST, and ISO 27001, applying defense-in-depth acrossinfrastructure, platform, and application layers. Led cloud security and cybersecurity operations by integrating and tuning AWS GuardDuty, Azure Sentinel, and GCPSecurity Command Center (SCC) for threat detection and incident response.Provided advisory on cloud and cybersecurity posture management (CSPM), IAM, logging, monitoring, vulnerability management, and secure configuration baselines. Delivered cybersecurity, cloud security, and compliance advisory across Banking, Insurance, Healthcare, FMCG, Retail, Aerospace,Defence, and Governmentsectors.Managed global IT audit and cybersecurity assurance engagements, including stakeholder walkthroughs and executive-level risk discussions. Evaluated and tested ITGC and ITAC across applications, cloud infrastructure, and supporting security systems. Supported SOX compliance and SOC (Type 1, Type 2,SOC 3) reporting, including control design assessment and operating effectivenesstesting. Authored concise cybersecurity assessment and audit reports with actionable recommendationsfor risk reduction and control maturity improvement.Mentored teams and offshore resources, ensuring quality delivery and alignment with EY cybersecurity and cloud methodologies.
EDUCATION
Calcutta University, Kolkata
Bachelor of Science - BS, Electrical, Electronics and Communications Engineering
West Bengal University of Technology, Kolkata
Master's degree, Computer Science
University of Virginia Darden School of Business
Business Specialized Certification, Business Administration and Management, General
ABOUT SUBODEEP RAY
As a Senior Cloud Security Consultant, I specialize in designing and auditing secure cloud infrastructures across AWS, Azure, and GCP. With over 9+ years of hands-on experience, I’ve helped global clients across Banking, Insurance, Healthcare, FMCG, Retail, Aerospace, Defence, and Government sectors build resilient cloud environments that meet stringent compliance standards.My expertise spans cloud security architecture, ITGC/ITAG assessments, SOX/SOC compliance, and cloud-focused risk advisory. I’ve led large-scale cloud audits, developed custom security control frameworks, and provided executive-level guidance on secure cloud transformation strategies.Holding a Master’s degree in Computer Science, I bring strong technical depth along with a strategic mindset. I am actively pursuing ISACA’s Certified Information Security Manager (CISM) certification, expected to be completed by August 2025, to further strengthen my governance, risk management, and cloud security leadership capabilities. I’m passionate about cybersecurity, cloud governance, and enabling secure digital innovation. I’m also actively exploring the intersection of technology and policy, with aspirations to grow into AI Ethics & Policy in the future — and eventually pursue a PhD in the domain.Let’s connect if you’re looking to collaborate on cloud security strategy, regulatory compliance, or emerging tech risks!
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.