Suraj Kannake

About Suraj Kannake

Manager at Deloitte with nearly 12 years of experience in information security, risk management, and compliance. Focused on aligning enterprise security strategies with business objectives, utilizing frameworks like ISO 27001, NIST CSF, and CIS Controls. Skilled in risk assessments, external audits, and security governance in sectors including BFSI, manufacturing, and healthcare. Proficient in implementing and managing ISMS and GRC frameworks while collaborating with cross-functional teams to enhance security measures. Committed to driving effective security operations, incident response, and compliance with global standards such as SOC 2, PCI-DSS, and GDPR to mitigate risks and safeguard critical assets.

Experience

1. Manager- Cyber Strategy & Transformation

   Deloitte

   Mar 2025 — Present · Pune, IN

   Lead enterprise Information Security, Risk, and Compliance programs aligned with ISO 27001, NIST CSF, and CIS Controls.• Develop and execute organization-wide information security strategy integrated with business goals.• Conduct risk assessments, maintain risk heatmaps, and drive mitigation initiatives.• Manage external audits (ISO, SOC 2, PCI) for BFSI, manufacturing, and healthcare clients.• Oversee incident response, BCP/DR processes, and post-incident analysis.• Collaborate with CISO, InfoSec, legal, HR, and procurement teams to embed security governance.• Implement and maintain ISMS aligned with ISO 27001, SOC 2, PCI-DSS, SOX, GDPR, and DPDP Act requirements.• Designed and implemented control frameworks for organizational strategy mergers in alignment with 2LoD coordination.• Conducted interviews with 1LoD and 2LoD stakeholders to assess control applicability and operational relevance.• Developed control designs aligned with existing organizational standards using the 5W1H methodology.

Education

• Asian School of Cyber Laws

  Diploma in cyber law

• FinX Institute Limited ( Formerly BSE Institute Limited)

  Executive program investment management , Investments and Securities

• SVKM's Narsee Monjee Institute of Management Studies (NMIMS)

  Executive MBA, Leadership Strategy

• Savitribai Phule Pune University

  Bachelor of Engineering (BE), Electrical, Electronics and Communications Engineering

  2006 — 2010

Skills

• Red Hat Ent 6
• Bgp
• Cisco Technologies
• Ospf
• Mcitp
• Tcp/Ip
• Troubleshooting
• Check Point
• Networking
• Ccna
• Ccie Security
• Vpn
• Juniper Technologies
• Routers
• Switches
• Fortinet
• Network Security
• Security
• Routing
• Vlan
• Ccnp
• Juniper Jncia