ROHIT KUMAR
Delhi
Summary
Results-driven Cybersecurity and GRC professional with expertise in information security governance, risk management, compliance, and security programme management. Aligns security initiatives with business objectives, manages security risks, and enhances enterprise security programmes through effective use of the Archer tool. Preferred industries include IT Security, ITES, Cybersecurity, Fintech, and Information Security.
Overview
1
1
Language
1
1
Certification
15
15
years of professional experience
Work History
Lead Consultant
Nusummit (Aujas Cyber security) Pvt Ltd.
Gurgaon
03.2023 - 06.2026
- Driven full GRC platform administration using security metrics and risk KPIs.
- Administered Archer modules for issue, exception, operational risk, and vulnerability management to enhance risk oversight.
- Automated workflows, customised applications, and built dashboards from functional requirements.
- Implemented enhancement and administered Archer solutions across multiple GRC domains daily.
- Generated custom dashboards, reports, and metrics to provide senior management and auditors with insights for informed decision-making.
- Configured questionnaires, fields, workflows, and data feeds for risk compliance.
- Configured workflow transitions, notifications, and escalation rules for tracking.
- Managed user access roles and permissions for role-based access control.
- Coordinated with asset owners and technical teams for remediation tracking.
- Maintained system performance and availability by troubleshooting Archer service issues.
- Participated in Archer platform upgrades, patching, and configuration changes.
- Supported audit activities using Archer data, dashboards, and reports.
- Delivered training and awareness programmes to equip end users and high-level managers with essential knowledge for effective system utilisation.
- Provided technical support and training for end users and processes.
- Managed incident, problem, and change management activities to ensure payment gateway availability and SLA compliance.
- Prepared the organisation for PCI-DSS audit.
- Ran DR drills and formalised standard operating procedures for DR.
- Imported and updated data using Archer Data Import Tool (DIT).
- Installed SSL certificates on Archer servers and managed renewal activities.
Principal Software Engineer_
Dell Technologies Pvt Ltd.
Gurgaon
01.2020 - 03.2023
- Delivered multiple consulting engagements with end-to-end implementation of GRC Archer for financial services, ensuring alignment with client needs.
- Managed infrastructure for all Archer GRC servers, overseeing monitoring, upgrades, and overall system health.
- Conducted functionality testing post-Archer upgrade to version 6.11, managing production and DMZ environments for GRC infrastructure.
- Managed all the Incident across the whole GRC infrastructure with the assignation and closure.
- Conducted Internal Security Audits for projects and functions to ensure compliance based on Company policy.
- Managed teams and work countrywide with domain expertise.
- Oversaw team operations to enhance project delivery and performance.
- I have created documents for functional and technical specifications as per business requirements.
Technology Security Specialist
Accenture Solutions Pvt Ltd.
Gurgaon
04.2019 - 12.2019
- Worked on the implementation and enhancements related to Audit Management, Compliance Management, Risk Management solutions etc. and migrated them successfully in other environments for one of the mining industry client.
- Developed a GRC tool recommendation report for an Asian client, evaluating three eGRC tools based on high-level functional, non-functional, and technical criteria.
- Engaged with clients to gather their requirements and customised solutions to meet their specific needs.
- Configured access control, record permissions, events, notifications. Creation of workspace, Dashboards, iViews, fields, reports in Archer.
- Worked on functionality testing after archer upgrade to 6.11 version .
- Created QRGs and design documents to support maintenance tasks for different archer solutions.
- Supported team efforts by executing essential tasks for daily service delivery, ensuring smooth operations.
GRC Consultant
HCL Technologies Ltd.
Noida
01.2017 - 04.2019
- Accountable for day-to-day technical administration of the Archer platform.
- Define/configure questionnaires/workflows/forms/reports into GRC Archer.
- Performed Archer version upgrade from 5.X to 6.3.
- Administered user accounts, data feeds, workflows, and reports access on Archer platform, ensuring data integrity and streamlined operations.
- Executed UATs and implemented code into production and Testing environment.
- Executed test cases and documented them.
- Implemented end-to-end SECOPs solution for Asian stock exchange client, enhancing security operations.
- Completed McAfee ESM tool Integration with SECOPs through UCF.
- Integrated Symantec MSS tool with Mail monitor datafeed, improving threat detection capabilities.
- Conducted Phishing Alert Integration with SECOPs through datafeed.
- Implemented Remedy Bi-directional API Integration with SECOPs.
- Installed, tested and deployed new applications into Archer.
- Managed input and output to and from the Archer solution to ensure integrity and quality of data.
- Installed Archer and UCF Connector into Multi-host environment.
- Collaborated on project for Asian client
- Outlined key responsibilities for position
Consultant
Aujas Networks Pvt Ltd
Gurugram
12.2013 - 01.2017
- Designed / developed / customized various core solutions and Out- of - Box solution for the business environment on Archer framework.
- Configured access control, record permissions, events, notifications. Creation of workspace, Dashboards, iViews, fields, reports in Archer.
- Designed/Installed Archer on Single / Multi Host Configuration mode.
- Completed Qualys -Archer Integration and ITAM Integration.
- Collaborated with GRC sustenance team to address client issues and deliver effective solutions.
- Performed GRC Implementation team to design process flows etc.
- Developed LLDs, user manuals, and UAT documents; conducted UAT tests and facilitated workshops for business users.
- Completed workflow testing & prepared training materials for the end users.
- Conducted packaging of all the solutions and deployment on Production instance
- Participated in project discussions with government client to align project objectives with client requirements.
- Role:
GRC Consultant
AKS Information Technology
Noida
06.2012 - 11.2013
- Worked as an active team member of ISMS audit team to perform the Risk Assessment and gap analysis.
- Web applications security auditing on the basis of OWASP Top 10 standards and various tools.
- Facilitated acquisition and integration of cyber forensics products, streamlining processes and enhancing operational effectiveness.
- Conducted digital data acquisition, decryption, and file system analysis.
- Used of ideal computer forensic software/hardware tools to copy data on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis.
- Provided Demo training sessions to Karnataka & Bhopal police on various computer forensics & Mobile forensics tools.
- Collaborated with Noida police during cyber crime investigation sessions to enhance local law enforcement capabilities.
- Delivered tailored technological services through engagement in diverse projects with government and corporate clients, addressing specific client needs.
- Providing training related to information security to the corporate & government clients.
- Successfully completed the JEE-2013 security audit process all over India as enthusiastic team
Executive-Digital Forensics
Fracton Technologies
Gurugram
12.2011 - 05.2012
- Use of computer forensic software/hardware tools to forensically copy data found on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis.
- Involved in digital data recovery, decryption and file system analysis.
- Collaborated on projects with government agencies regarding finance and revenue technologies, contributing to advancements in digital forensic practices.
- Facilitated business promotions and presentations to highlight benefits of computer forensics solutions, enhancing client understanding and engagement.
- Reviewed valuations to confirm compliance with established standards, ensuring accuracy and reliability in financial assessments.
Education
Master of Science - Cyber Law and Information Security
Indian Institute of Information Technology
Allahabad01-2011
B.Tech. - CS&IT
I.E.T. M.J.P Rohilkhand University
Bareilly01-2009
Skills
- Archer administration
- Qualys integration
- Governance Risk Compliance
- PCI-DSS
- Vulnerability Management
- Risk management
- Incident Management
- Cloud Security Management
- SIEM tool Integration
- ITIL methodologies
- Performance Monitoring
- Power BI
- Team leadership
- Stakeholder management
- Project management
- Cloud Security Management
Certification
CISM certified (Exam ID: EH-132099),
IRCA ISO 27001:2005 Lead Auditor Course Certified (June,2013),
CEH V.8 Certified from Byte code Cyber Security Lab (Mar 2014),
Archer Certified Administrator 5.x Exam (July 2014), Qualys Guard Certified Specialist (July 2015)
PERSONAL DOSSIER
Linguistic Abilities : English & Hindi
ACADEMIC PROJECTS /PAPERS PUBLISHED
Title: INSPIRE: Integrated Network Security Policies in Routers for Enterprises., Organization : Indian Institute of Information Technology, Allahabad, Duration :6 Weeks, Team Size :4, Scope :The project involved the development of suggested Framework to integrate all the network security policies for enterprises where the number of policies are not always fixed or varies over the time period, by mapping the finite state machine with router nodes in such a way that coming data traffic from unsecured network will only required to face the policies which are needed to check and verify with the help of optimal number of router nodes., Accepted/Published: International Conference on Computer Engineering and Technology (ICCET 2011): Paper ID -T040/and awaited to publish in ASME Press.
Timeline
Lead Consultant
Nusummit (Aujas Cyber security) Pvt Ltd.
03.2023 - 06.2026
Principal Software Engineer_
Dell Technologies Pvt Ltd.
01.2020 - 03.2023
Technology Security Specialist
Accenture Solutions Pvt Ltd.
04.2019 - 12.2019
GRC Consultant
HCL Technologies Ltd.
01.2017 - 04.2019
Consultant
Aujas Networks Pvt Ltd
12.2013 - 01.2017
GRC Consultant
AKS Information Technology
06.2012 - 11.2013
Executive-Digital Forensics
Fracton Technologies
12.2011 - 05.2012
Master of Science - Cyber Law and Information Security
Indian Institute of Information Technology
B.Tech. - CS&IT
I.E.T. M.J.P Rohilkhand University