Arpit Dhaka

Cluster Lead (North)

• Implemented Information Security Management Systems (ISMS), Privacy Information Management Systems (PIMS), and Business Continuity Management Systems (BCMS) for leading organizations, including a top event company in Dubai, a prominent women's clothing brand, major fintech
  companies in India, and a leading asset management firm in the UK.
• Led and contributed to multiple projects focused on Implementing process flows, managing Subject Access Requests (SARs), developing redaction guidelines, creating process flow diagrams, and overseeing risk management
  and mitigation strategies. Ensured compliance with industry standards and improved operational efficiency.
• Facilitated stakeholder discussions to develop policies and procedures, authored management documentation, and led the implementation of tools to support comprehensive security and privacy frameworks. Ensured alignment with industry standards and organizational goals.

• Implemented multiple ISO frameworks, including ISO 27001:2013 and 2022, ISO 27701, ISO 22301, ISO 27017, ISO 27018, and SOC 2, across various projects. Developed comprehensive policies, procedures, management
  documentation, disaster recovery plans, privacy frameworks, and facilitated evidence collection and review for audits.
• Conducted internal audits and supported certification and surveillance audits for all projects. Additionally, I provided consulting services for Information Security (InfoSec) and Governance, Risk, and Compliance (GRC) departments, ensuring adherence to regulatory standards (ISO 27001,
  27701, 22301, SOC 2) and best practices.
• Collaborated with industry-leading companies across diverse sectors, including travel, ports, mining, IT solutions, fintech, and banking. Provided tailored solutions and ensured alignment with industry-specific regulations and best practices.

• Conducted client briefings, in-depth research, and managed contracts from a privacy and security perspective for ongoing vendor assessments. Ensured compliance with privacy regulations and security standards to mitigate risks for clients.
• Applied expertise in the Civil Procedure Code (CPC), Contract Act, Companies Act, IT Act, and ISO 27001 as external consultants. Provided vendor assessment and audit services to clients, ensuring compliance with legal frameworks and industry standards.