Sujith Kumar

About Sujith Kumar

Information Security and Digital Risk Executive with 20+ years of experience leading enterprise-wide security, risk, and governance programs across global organizations. Proven track record of advising boards and executive leadership on cybersecurity, digital resilience, and technology risk while enabling secure digital and AI-driven transformation.Recognized for building and scaling high-performing security organizations, embedding security-by-design and risk-by-design principles, and aligning cybersecurity and AI governance initiatives with business strategy, regulatory expectations, and enterprise risk management. Experienced in safeguarding critical data and digital assets while ensuring confidentiality, integrity, availability, privacy, and recovery across complex, hybrid, and cloud-first environments.Deep expertise in designing and operationalizing enterprise security and risk frameworks including NIST, ISO 27001, Zero Trust, and integrated GRC models. Led security architecture, DevSecOps, incident response, business continuity, and cloud security programs at scale. Actively guided organizations through AI and digital transformation, establishing AI governance models, privacy-preserving controls, and risk management approaches for generative AI, LLMs, and emerging technologies.Well-versed in global regulatory and compliance landscapes including GDPR, HIPAA, PCI-DSS, and evolving AI regulations and responsible AI standards. Trusted advisor known for translating complex cyber and AI risks into clear, actionable insights that enable informed board-level decision-making and measurable business outcomes.Board & Executive Expertise: CISO & Enterprise Cybersecurity Leadership Board & Executive Advisory on Cyber & AI Risk Cybersecurity & Digital Transformation Strategy AI Governance, Responsible AI & AI Risk Management Enterprise Risk Management & Security Governance Budget Ownership & Security Investment Optimization Cloud & Platform Security (AWS, Azure, GCP) Application, Product & DevSecOps Security Data Protection, Privacy & AI Compliance (GDPR, CCPA) Identity & Access Management (IAM) Audit, Regulatory & Assurance (ISO 27001, PCI-DSS) Security Operations, Incident Response & Resilience Threat Intelligence, Threat Hunting & Zero Trust Third-Party, Supply Chain & Ecosystem Risk Executive Stakeholder Engagement & Cross-Functional Leadership

Experience

1. Principal Cybersecurity

   Fidelity Investments

   Mar 2023 — Present · IN

Education

• Indira Gandhi National Open University

  Master of Computer Applications - MCA