Naveen Chandra

About Candidate

 Having 7.5 years of experience in Governance Risk & Compliance (GRC)/Information
security Management Systems (ISMS) for different product and service-based
organizations.
 Hands on experience in handling Internal and External Audits for standards of ISO/IEC
27001:2013, ISO 20000, PCI DSS SAQ’s, SOC TYPE I and Type II, ISO 9001, AS 9100, ISO
13485, ISO 27018:2019, Risk Management.
 Hands on experience in drafting policies and procedures, perform annual reviews, CAPA,
root cause Analysis, Change management, Incident Management, coordination between the
infrastructure team for handling day to day activities like highlighting the vulnerabilities
identified during Internal and external VAPT, ASV SCANS and getting them resolved within
stipulated time frame, imparting induction trainings for new joiners for information
security and compliance

Education

B
Bachelor of Engineering 2013
BMSCE
M
Master of Technology 2016
PES University

Work & Experience

M
Manufacturing process Engineer June 2016 - January 2018
GE Healthcare

Roles & Responsibilities  Lean Manufacturing   Value stream mapping, cycle time study, in house kaizen conceptualization and implementation for improved cycle times  Single piece mixed model line by CT study, CT improvement and reduction by mocking up of kaizens  Introduction of operational mechanism for 5S walkthrough  Responsible for monthly kaizen walkthrough across the site  Mocking up of conveyor system as per industry standards in house moonshine shop before conversion to conveyor system  Created ERS (Equipment requirement specification) by coordinating with cross functional team  Identified, Interacted and negotiated on the technicalities and requirements with suppliers  Achieved improved cycle times, and improved productivity by 31 percent post implementing mixed model line ✓ Manufacturing process Engineer  Initiating production process changes (PPC change management) for a transition from conventional assembly line to automated mixed model conveyor system  Reduction of Cycle times of product build by improving process by analyzing existing process for assembly and testing  Responsible for creating standard operating procedures (SOP’s), electronic DHR’s (eDHR’s) for the new process established for moving line conveyor system  Process validation and verification methodologies  Equipment Qualification: Installation Qualification, Operational Qualification,

P
Product Development engineering April 2018 - December 2019
TAAL Tech India Pvt Ltd

Responsible for being Quality assurance for 25 plus accounts (clients)  Ensured to drive the delivery teams towards Quality deliverables  Created and implemented format/ template (Account health reports) for monitoring and measuring project metrics (OTD, First time right etc.)  Responsible for implementing KPI’s for new projects and periodic evaluation of existing accounts  Conduction of intelligent audits as per ISO 9001:2015 standards, identification of gaps, and initiating non- conformances also drive the team towards closure of gaps for all Delivery teams  Ensuring Audits performed for Aerospace accounts as per AS 9100 standards, drive towards gaps identification and their closures by facilitating RCA  Conduction of Audits for Support functions  Been a core team member of organization to organize and drive BSI Surveillance Audit  Evaluation of RCA performed by team as per standards and driving towards its closures  - Ensuring organization wide templates, forms, formats are created/implemented changes (Revisions) and provide KT to the teams  - Responsible for driving HSE office wise HSE walkthrough, report the gaps to the team and ensuring towards closures within defined time frame  Proposed and implemented 5S Methodology organization wise to ensure organization meets standard for work environment Professional Experience & Summary   Responsible for initiating customer feedback survey and to ensure high CSI scores are achieved, also proposal of action plans from delivery team is communicated to the respective customers for better customer relationship  Also ensuring all the data are monitored, measured and consolidated driving and facilitating Management review meeting  Implementation of project management process flow for new projects and continual improvements for existing process flow  Responsible for conducting Training and development to delivery teams, in Quality and continual improvement aspects.

S
Sr Associate Infosec & Compliance December 2019 - September 2021
Netsurion Technologies Pvt LTD

Ensure that Netsurion employees adhere to ISMS, PCI DSS and SOC 2 Requirements  Daily review of critical observation report to highlight the concern to respective process owners propose the corrective action to the risk highlighted  Perform internal audits for standards ISO 27001:2013, ISO 20000, PCI DSS and SOC Type1 and Type 2, ensuring that internal controls are meeting these standard requirements  CSAT Review and following up with respective teams when the customer review is negative, also follow up on the corrective actions  Key Performance indicators review on monthly basis for respective product, support, and engineering teams to meet the service level agreements are met Professional Experience & Summary  Making sure, that Firewall rule base review, Internal and External penetration testing are conducted by concerned stake holders as per schedule and follow-up on the remediation of vulnerabilities with IT team and concerned stake holders  New Policies and procedures creation for the organizations, including annual review of policies and procedures as per defined frequencies  Conduct Business continuity plans twice year for service delivery and support teams  Ensuring Disaster recovery activities are performed by the IT team with evidence  Conduction of information security awareness trainings to new joiners and existing employees if the organizations  Evaluation of RCA performed by team as per standards and driving towards its closures  Ensuring organization wide templates, forms, formats are created/implemented changes (Revisions) and provide KT to the teams

C
Cyber Security Transformation Consultant II Sep 2021 - Mar 2022
Optiv Security

Consultant for a leading American multinational Semi-conductor company  Assisted with the development of Risk Management Program as per industry standards and best practices  Conducted documents review of client relevant to the project scope  Conducted specific business unit’s interviews to understand the existing risk management activities performed within  Developed findings and recommendations report post interviews  Created Risk Management policy and methodology documents for client  Developed risk register tailor made to business objectives of client  Conducted interviews related to key and critical controls with information security team of client  Accordingly mapped the controls per findings as part of deliverable

G
Governance Risk & Compliance (GRC) Specialist (Mar 2022 - Jan 2023
Bitonic Technology Labs Private Limited

 Ensuring Compliance Requirements of the organization – ISO 27001:2013, ISO 27018:2019, SOC 2 Type I & II,  GDPR and HIPAA Vendor Due-Diligence questioners  Implementation of ISO 27001:2013 and ISO 27018:2019 for the organization  Implementation of System and Organization Controls (SOC 2 Type I and II) Interpersonal Skills Professional Experience & Summary  Handled External certification Audits, Surveillance Audit  Handled Client/Customer audits relevant to compliances and framework requirements  Experience in conducting Risk Management Activities  Internal Audits for teams under Audit scope  Creation of organization Policies and Procedures  MSA’s and RFPs From Prospects and customers are addressed within ETA  Business Continuity Plans, Backup and restoration activities along with Infra Team  User access reviews, Privilege access reviews.  Privacy Risk Assessments, Annual Risk Assessments

G
GRC Technical Lead Feb 2022 - Present
Visionet Systems, Bangalore

 ISO 27001:2013 Gap Assessments, by reviewing existing policies, procedures, templates and other applicable internal controls.  Preparation of gap assessment reports, with recommendations to client  Experience in drafting polices and procedures as per ISO 27001:2013 standards and business requirements.  Risk Management - Conduct risk assessments for various business units along with client stakeholders  Led the weekly client status calls with project progress updates.  KPI templates, and KT  Change Management, Incident management  Client Due Diligence, Vendor Due Diligence, RFPs, RFIs  Client Audits

Be the first to review “Naveen Chandra”