Diligent, techno functional professional with expertise in consulting/advisory services in Information Security, Risk Management, Cybersecurity & GRC (Governance Risk & Compliance) Solution Architecture & Design, Security Frameworks Design & Implementation, Information Security Regulations & Standards Distinguished proficiency in leading the development and implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored Proficient working knowledge of overall risk management process that is conducting/participating on internal/external risk assessments and remediation process Showcased excellence by participating in security compliance audits performed by internal & external teams, led organization wide audits like ISO 27001, SOC 2 audits by working closely with external audit body (KPMG) Proven acumen in managing large strategic projects covering aspects such as feasibility studies, business model definitions, market entry and growth strategies Successful Contribution: CoE (Centre of Excellence) Frameworks: Established stable & monitored environments to create proactive monitoring routines as part of the Centre of Excellence (CoE) competency
Hi, I’m
Rahul Basu
Project Manager
Hyderabad
Summary
Overview
16
years of professional experience
4
Certifications
1
Language
Work History
Tech Mahindra, Jackson National Life Insurance, Jackson National Life, Hyderabad
Project Manager
2023.01 - Current (1 year & 8 months)
Job overview
- Insurance Company is a U.S
- Company and has a leadership position in annuities market for retail investors
- It has producer focused wholesale model with largest wholesaling network
- This is an industry leading asset liability management with low cost-efficient operations
- Role and Responsibilities:
- Function closely with stakeholders to prepare and execute the strategy for Information Security; active part of Offshore Risk Management Team
- Monitor overall risk management process that is conducting/participating on internal/external risk assessments and remediation process
- Drive & participate in different Risk, Compliance & Audit program and support all external/internal compliance assessment
- Liaise on with Client counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project
- Perform independent assessment & recommend mitigation strategies on client’s
- Monitor compliance with various contractual IT security requirements, customer policies/procedures
- Provided detailed project status updates to stakeholders and executive management.
- Monitored project performance to identify areas of improvement and make adjustments.
YASH Technologies, Hyderabad
Project Manager Enterprise GRC
2021.04 - 2022.12 (1 year & 8 months)
Job overview
- Designated as an advisory project consultant for implementation of Information Security Management System and important part of enterprise project team fabricated the Cyber Security Centre of Excellence
- Drive high-profile and high-impact projects involving complex GRC and risk management
- Designed and established or transformed IT risk management, governance, and compliance programs based on clients' business structures, strategies, and priorities
- Performed gap assessments between security and risk leading practice frameworks and clients' risk and control frameworks and advise on remediating gaps
- Communicated GRC technology capabilities into business terms for executive stakeholders
- Managed the overall project development, maintenance with implementation of IT GRC architecture, strategy, policies and standards in support of F&G’s strategic goals
- Ensured IT GRC team follows policies, procedures, and operational risk frameworks to reduce cyber risk to the business
- Establish and ensure project governance, manage project contributor teams directly or indirectly, define deliverables and content and manage quality of work products
- Achieved project deadlines by coordinating with contractors to manage performance.
Tech Mahindra, Hyderabad
Project Manager Enterprise Risk and Compliance
2010.06 - 2021.09 (11 years & 3 months)
Job overview
- Developed and managed complex, enterprise-wide information technology (IT) project plans and deliverables; led activities to determine project scope, schedule and budget baseline
- Created and implemented integrated Enterprise Risk Management (ERM) program & systems (ERM, audit, and compliance)
- Developed risk-reward matrices (risk appetite) for key areas and then identification of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) based on finalized risk appetite
- Audit enablement for multiple clients in identifying and implementing internal controls using Governance, Risk, and Compliance tools
- Identify & drive process\product improvement opportunities. Involve in performance effective governance of Vendor.
- Managed Business risks for Strategic Business Units, Operational risks in Business processes, Business Process Consulting, Process Improvement, Program Delivery management, Project Management and Business analysis
- Developed, assessed, monitored and reported Enterprise risks, Operational risks in Business processes and Business Unit risks
- Collaborated with auditors to demonstrate compliance with internal and external standards
- Performed complex task of developing and overseeing control systems to prevent possible violations of legal guidelines and internal policies
- Revised project procedures and implemented policies to identify possible risks or non- conformity issues
Carphone Warehouse
Front Line Manager
2009.01 - 2010.01 (1 year)
Job overview
- CW is a Prominent Mobile Phone & ISP of UK offering widest range of mobile phones - from the latest flagship models to great value handsets across UK & Ireland
- Roles and Responsibilities:
- Efficiently managed a team of 36 members in Inbound Level 1 UK Technical Helpdesk Process
- Successfully involved in the Process Transition for Reputed UK Accounts – Car Phone Warehouse, A Prominent Mobile Phone & ISP of UK
- Involved in Team Management, Performance Management, Met SLA & worked as SPOC for client queries.
Bank of America
Team Leader
2008.01 - 2009.01 (1 year)
Job overview
- Efficiently managed a team of 16 members in a Sub-Process of Keying Centre of Excellence (KCOE) segment named Lockbox
- Responsible for sharing the volume queue to the associates along with ensuring individual performances
- Tracking & Monitoring Individual & Team performances/Variation in Performances on weekly basis
- Involved in Goal Setting for the Team, Driving Team’s Performance, Competency Mapping, Team Management and performance Management.
Education
University of Calcutta
BA from English
University Overview
Skills
Project/Program Management
Accomplishments
Accomplishments
- YASH Technologies 2021-2022
- Enterprise GRC Manager
- Role and Responsibilities:
- Designated as an advisory consultant for implementation of Information Security Management System and important part of team fabricated the Cyber Security Centre of Excellence
- Drive high-profile and high-impact projects involving complex GRC and risk management
- Designed and established or transformed IT risk management, governance, and compliance programs based on clients' business structures, strategies, and priorities
- Performed gap assessments between security and risk leading practice frameworks and clients' risk and control frameworks and advise on remediating gaps
- Collaborated and led meetings with diverse high-level stakeholders, including C-suite, IT operations, system architects, security professionals, and business lead
- Communicated GRC technology capabilities into business terms for executive stakeholders
- Managed the overall project development, maintenance with implementation of IT GRC
- Architecture, strategy, policies and standards in support of F&G’s strategic goals
- Ensured IT GRC team follows policies, procedures, and operational risk frameworks to reduce cyber risk to the business
- Establish and ensure project governance, manage project contributor teams directly or indirectly, define deliverables and content and manage quality of work products
- Tech Mahindra 2010-2021
- Enterprise Risk and Compliance Manager
- Role: As Lead responsibilities are:
- Developed and managed complex, enterprise-wide information technology (IT) project plans and deliverables; led activities to determine project scope, schedule and budget baseline
- Created and implemented integrated Enterprise Risk Management (ERM) program & systems (ERM, audit, and compliance)
- Developed risk-reward matrices (risk appetite) for key areas and then identification of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) based on finalized risk appetite
- Audit enablement for multiple clients in identifying and implementing internal controls
- Using Governance, Risk, and Compliance tools
- Identify & drive process\product improvement opportunities
- Involve in performance effective governance of Vendor
- Managed Business risks for Strategic Business Units, Operational risks in Business processes, Business Process Consulting, Process Improvement, Program Delivery management, Project Management and Business analysis
- Developed, assessed, monitored and reported Enterprise risks, Operational risks in Business processes and Business Unit risks
- Collaborated with auditors to demonstrate compliance with internal and external standards
- Performed complex task of developing and overseeing control systems to prevent possible violations of legal guidelines and internal policies
- Revised project procedures and implemented policies to identify possible risks or non- conformity issues
Additional Information
Additional Information
- Audits: Led the enterprise level ISO audit conducted by DNV audit body; performed GAP analysis for SBUs and enterprise functions leading up to the audit readiness Contractual Compliance: Formulated contract compliance strategy for achievement in consultation with customer ensuring each party to the contract meets their agreed obligations and performance standards. Cross-functional Coordination: Collaborated closely with the Internal Assurance team to conduct internal audits for IT Infra and projects/accounts/functions of Tech Mahindra, Hyderabad with information security standard frameworks and client specific controls Process Management: Formulated the IT security framework, policy & guidelines across the business verticals; discussed, validated, and plugged BU specific IS policies into information security guidelines Client Engagement: Developed customer connects while ensuring effective and seamless implementation of ISMS and information security governance framework into each of performing engagements for over 250 clients across 3 critical strategic business unit clusters and entire enterprise support function Process Improvement: Developed an iterative methodology for a continuously improving processes to ensure that everything is being done the right way, at the right time, with the right people involved Process Migration & Transitions: Executed LAN & WAN migration of AT&T customers across various geographies globally Involved in Process Transition for UK Accounts – Car Phone Warehouse, Prominent Mobile Phone & ISP of UK
Certification
PMP - Project Management Professional
Timeline
Project Manager
Tech Mahindra, Jackson National Life Insurance, Jackson National Life
2023.01 - Current (1 year & 8 months)
Project Manager Enterprise GRC
YASH Technologies
2021.04 - 2022.12 (1 year & 8 months)
CISM- Certified Information Security Manager
2020-12
CSM- Certified Scrum Master
2020-12
PMP - Project Management Professional
2020-11
• ISO 27001:2013 Lead Auditor Certification
2018-10
Project Manager Enterprise Risk and Compliance
Tech Mahindra
2010.06 - 2021.09 (11 years & 3 months)
Front Line Manager
Carphone Warehouse
2009.01 - 2010.01 (1 year)
Team Leader
Bank of America
2008.01 - 2009.01 (1 year)
University of Calcutta
BA from English
1997.04
Similar Profiles
Gauge Horton-BeanGauge Horton-Bean
Operations Associate at Jackson National Life Insurance CompanyOperations Associate at Jackson National Life Insurance Company
Spencer LeslieSpencer Leslie
Operations Associate I at Jackson National Life InsuranceOperations Associate I at Jackson National Life Insurance
Cristal MartinezCristal Martinez
Lead Software Solution Designer at Jackson National Life InsuranceLead Software Solution Designer at Jackson National Life Insurance