Vikas Gaur

About Vikas Gaur

Result oriented Cyber Security and Technology Risk professional with over 15 years of proven track record of shaping and executing enterprise-wide strategies to identify, oversee and mitigate compliance and operational risks.~ Experience with strong background in both design and testing of security controls, ensuring compliance with Industry Standards and best practices.~ Comprehensive experience working across all three layers of defense in controls testing (1st LoD, 2nd LoD and 3rd LoD), ensuring robust risk management and compliance.~ Extensive experience in reporting and governance of enterprise controls, policies, issue management and performance measurements. Skilled in providing senior leadership with actionable insights into control effectiveness to strengthen governance and decision-making.~ Global Experience: Prolonged engagement with key markets such as United States, United Kingdom, European Union and Middle East.~ Industries Served- Consulting, Financial, Information Technology (IT), Product Development & Telecommunications.~ Core Skills-* Information Security* Data Privacy* Information Technology (IT) Audits * Business Continuity Planning (BCP)- Disaster Recovery (DR)* Governance Risk & Compliance* IT General Controls (ITGC) Testing* Security Controls Framework Review* IT Risk & Compliance* SOX Testing* Third Party Risk Management* Cyber Maturity Assessment based n NIST Cyber Security Framework (CSF)* Service Organization Controls (SOC1, SOC2) Reporting* Regulatory Compliance & Audits* Project Management* Program Management~ Certifications-* Certified Information Systems Auditor (CISA)* Artificial Intelligence - ISO 42001:2023 Lead Implementer & Lead Auditor* Information Security - ISO 27001:2022 Lead Implementer, ISO 27001:2013 Lead Auditor* Business Continuity - ISO 22301:2019 Lead Auditor* Privacy Management - EU GDPR Practitioner* Risk Management - ISO Governance - COBIT 2019 Foundation

Experience

1. Manager - Technology Consulting (Financial Services Advisory)

   EY

   Feb 2025 — Present

Education

• Central Board of Secondary Education

  HSC, Computer Science

  2005 — 2006

• NMIMS CDOE

  Postgraduate, Information Technology & Systems Management

• Maharishi Dayanand University

  Bachelor of Engineering - BE, Electrical, Electronics and Communications Engineering

  2006 — 2010

• Central Board of Secondary Education

  SSC, General Subjects

  2003 — 2004

Skills

• Regulatory Submissions
• Information Security Governance
• IT Risk Management
• IT Compliance
• IT Security Policies
• Regulatory Affairs
• Regulatory Audits
• Regulatory Compliance
• IT Governance
• Risk Management