Naveen Chandra
About Candidate
Having 7.5 years of experience in Governance Risk & Compliance (GRC)/Information security Management Systems (ISMS) for different product and service-based organizations. Hands on experience in handling Internal and External Audits for standards of ISO/IEC 27001:2013, ISO 20000, PCI DSS SAQ’s, SOC TYPE I and Type II, ISO 9001, AS 9100, ISO 13485, ISO 27018:2019, Risk Management. Hands on experience in drafting policies and procedures, perform annual reviews, CAPA, root cause Analysis, Change management, Incident Management, coordination between the infrastructure team for handling day to day activities like highlighting the vulnerabilities identified during Internal and external VAPT, ASV SCANS and getting them resolved within stipulated time frame, imparting induction trainings for new joiners for information security and compliance |
Education
Work & Experience
Roles & Responsibilities Lean Manufacturing Value stream mapping, cycle time study, in house kaizen conceptualization and implementation for improved cycle times Single piece mixed model line by CT study, CT improvement and reduction by mocking up of kaizens Introduction of operational mechanism for 5S walkthrough Responsible for monthly kaizen walkthrough across the site Mocking up of conveyor system as per industry standards in house moonshine shop before conversion to conveyor system Created ERS (Equipment requirement specification) by coordinating with cross functional team Identified, Interacted and negotiated on the technicalities and requirements with suppliers Achieved improved cycle times, and improved productivity by 31 percent post implementing mixed model line ✓ Manufacturing process Engineer Initiating production process changes (PPC change management) for a transition from conventional assembly line to automated mixed model conveyor system Reduction of Cycle times of product build by improving process by analyzing existing process for assembly and testing Responsible for creating standard operating procedures (SOP’s), electronic DHR’s (eDHR’s) for the new process established for moving line conveyor system Process validation and verification methodologies Equipment Qualification: Installation Qualification, Operational Qualification,
Responsible for being Quality assurance for 25 plus accounts (clients) Ensured to drive the delivery teams towards Quality deliverables Created and implemented format/ template (Account health reports) for monitoring and measuring project metrics (OTD, First time right etc.) Responsible for implementing KPI’s for new projects and periodic evaluation of existing accounts Conduction of intelligent audits as per ISO 9001:2015 standards, identification of gaps, and initiating non- conformances also drive the team towards closure of gaps for all Delivery teams Ensuring Audits performed for Aerospace accounts as per AS 9100 standards, drive towards gaps identification and their closures by facilitating RCA Conduction of Audits for Support functions Been a core team member of organization to organize and drive BSI Surveillance Audit Evaluation of RCA performed by team as per standards and driving towards its closures - Ensuring organization wide templates, forms, formats are created/implemented changes (Revisions) and provide KT to the teams - Responsible for driving HSE office wise HSE walkthrough, report the gaps to the team and ensuring towards closures within defined time frame Proposed and implemented 5S Methodology organization wise to ensure organization meets standard for work environment Professional Experience & Summary Responsible for initiating customer feedback survey and to ensure high CSI scores are achieved, also proposal of action plans from delivery team is communicated to the respective customers for better customer relationship Also ensuring all the data are monitored, measured and consolidated driving and facilitating Management review meeting Implementation of project management process flow for new projects and continual improvements for existing process flow Responsible for conducting Training and development to delivery teams, in Quality and continual improvement aspects.
Ensure that Netsurion employees adhere to ISMS, PCI DSS and SOC 2 Requirements Daily review of critical observation report to highlight the concern to respective process owners propose the corrective action to the risk highlighted Perform internal audits for standards ISO 27001:2013, ISO 20000, PCI DSS and SOC Type1 and Type 2, ensuring that internal controls are meeting these standard requirements CSAT Review and following up with respective teams when the customer review is negative, also follow up on the corrective actions Key Performance indicators review on monthly basis for respective product, support, and engineering teams to meet the service level agreements are met Professional Experience & Summary Making sure, that Firewall rule base review, Internal and External penetration testing are conducted by concerned stake holders as per schedule and follow-up on the remediation of vulnerabilities with IT team and concerned stake holders New Policies and procedures creation for the organizations, including annual review of policies and procedures as per defined frequencies Conduct Business continuity plans twice year for service delivery and support teams Ensuring Disaster recovery activities are performed by the IT team with evidence Conduction of information security awareness trainings to new joiners and existing employees if the organizations Evaluation of RCA performed by team as per standards and driving towards its closures Ensuring organization wide templates, forms, formats are created/implemented changes (Revisions) and provide KT to the teams
Consultant for a leading American multinational Semi-conductor company Assisted with the development of Risk Management Program as per industry standards and best practices Conducted documents review of client relevant to the project scope Conducted specific business unit’s interviews to understand the existing risk management activities performed within Developed findings and recommendations report post interviews Created Risk Management policy and methodology documents for client Developed risk register tailor made to business objectives of client Conducted interviews related to key and critical controls with information security team of client Accordingly mapped the controls per findings as part of deliverable
Ensuring Compliance Requirements of the organization – ISO 27001:2013, ISO 27018:2019, SOC 2 Type I & II, GDPR and HIPAA Vendor Due-Diligence questioners Implementation of ISO 27001:2013 and ISO 27018:2019 for the organization Implementation of System and Organization Controls (SOC 2 Type I and II) Interpersonal Skills Professional Experience & Summary Handled External certification Audits, Surveillance Audit Handled Client/Customer audits relevant to compliances and framework requirements Experience in conducting Risk Management Activities Internal Audits for teams under Audit scope Creation of organization Policies and Procedures MSA’s and RFPs From Prospects and customers are addressed within ETA Business Continuity Plans, Backup and restoration activities along with Infra Team User access reviews, Privilege access reviews. Privacy Risk Assessments, Annual Risk Assessments
ISO 27001:2013 Gap Assessments, by reviewing existing policies, procedures, templates and other applicable internal controls. Preparation of gap assessment reports, with recommendations to client Experience in drafting polices and procedures as per ISO 27001:2013 standards and business requirements. Risk Management - Conduct risk assessments for various business units along with client stakeholders Led the weekly client status calls with project progress updates. KPI templates, and KT Change Management, Incident management Client Due Diligence, Vendor Due Diligence, RFPs, RFIs Client Audits