Suhas Joshi

About Suhas Joshi

With 19 years of experience in the Information Security domain, I bring a unique blend of technical expertise, auditing acumen, and legal knowledge, with a strong command in Governance, Risk, and Compliance. My proficiency in implementing and testing IT compliance requirements, including ISO27001, IT SOX, and SOC I/ II, is complemented by a solid understanding of COBIT and ITIL frameworks.As a seasoned consultant, I have guided companies in establishing robust Information Security Management Systems (ISMS) and IT Service Management Systems (ITSMS), leading to successful ISO 27001 and ISO certifications.My diverse skill set covers a wide range of fields- IT and Security Auditing (ISO Risk Management and Vendor Risk Assessment- SOX Compliance- Business Continuity Planning and Disaster Recovery Planning (BCP-DRP)- Vulnerability Management- COSO/COBIT Frameworks- Compliance Monitoring and Reporting- RFI/RFP and Master Service Agreement (MSA) and deal risk review- Data Loss Prevention (DLP) and Endpoint Security- Policy and Procedure Design and Implementation- Gap Analysis and Process Improvement- Governance, Risk and Compliance- Incident ManagementCredentials – CISA, CEH, ISO 27001, LA/LI, DCPLA, CPISI, ITIL, CSA STAR AuditingI am committed to enhancing security postures and ensuring seamless compliance across various industries, always aiming for excellence and innovation in the ever-evolving field of Information Security.

Experience

1. Business Information Security Officer (Biso-sm)

   Cognizant

   Feb 2021 — Present

   Business Information Security Officer with extensive experience in managing complex engagements for a Health Science Account in Central Europe- Proficient in conducting due diligence, responding to RFPs/RFIs, and overseeing the contract lifecycle management with a keen focus on security- Proactive in risk assessment, KRI monitoring, and security incident management to ensure the protection of client interests- Demonstrated commitment to security excellence through regular audits, gap analysis, and process enhancements, including automation for efficiency- Skilled in building and maintaining strong relationships with internal and external stakeholders, ensuring effective governance and consistent communication- Leader of the Security Awareness Program, fostering a culture of security mindfulness within the organization- Dedicated to providing comprehensive support for large-scale engagements and driving security initiatives that align with both organizational goals and client expectations.

Education

• Savitribai Phule Pune University

  Bachelor of Laws (LL.B), Cyber Laws

• MSBTE

  Diploma, Industrial electronics

  1999 — 2002

• Shivaji University, Kolhapur

  Bachelor of Engineering - BE, Computer Science

  2003 — 2007

Skills

• Disaster Recovery
• Cissp
• Ceh
• Security Audits
• Itil
• Network Security
• Penetration Testing
• Risk Assessment
• Sarbanes-Oxley Act
• Application Security
• IT Service Management
• Information Security
• Governance
• Dlp
• Security
• Iso 27001
• Iso 20000
• IT Audit
• Business Continuity
• Payment Card Industry Data Security Standard (Pci Dss)
• Incident Management
• Information Security Management
• Consulting
• Vulnerability Assessment
• Information Technology
• Cisa
• Risk Management
• Cobit
• Bs25999
• Pci Dss
• Isms