Summary
Overview
Work History
Education
Skills
Certification
Professional Achievements
Core Competencies
Personal Philosophy
Languages
References
Timeline
Generic
Sudhansu Kumar
Open To Work

Sudhansu Kumar

Bangalore

Summary

Over 13.8 years of experience in GRC, Cloud Security, Cyber Risk Management, Data Privacy, IAM, and Security Architecture Design. Expertise in AI/ML Security, ensuring protection for machine learning models and data. Skilled in integrating security practices throughout the product development lifecycle and defining tailored security frameworks. Conducts Security Assessments and ensures compliance with industry standards, developing strategies that mitigate high-priority risks across diverse environments.

Overview

14
14
years of professional experience
4
4
Certification
5
5

Different Industry Expertise (Finance, SaaS, Energy, Automotive)

15
15

Global Security Frameworks Implemented

Work History

Principal Security Specialist

Netradyne Inc.
Bangalore
04.2025 - Current
  • Directed vulnerability management, promptly reducing high-priority risks.
  • Conducted security assessments of computer networks and systems to identify potential vulnerabilities.
  • Designed and deployed AI/ML security strategies, integrating CrowdStrike CSPM.
  • Established GTB DLP Solution and automated SCRUT GRC processes.
  • Aligned security control framework with 13 global standards, including NIST SP 800 53 and ISO 27001, ISO/SAE 21434, RED EN 18031.
  • Refined DevSecOps practices for secure AI and IoT development.
  • Served as lead SME for Security Risk & Compliance, Compliance Engineering, AIMS, and IAM Governance.

Senior Security Technologist

Uber
Bangalore
01.2025 - 03.2025
  • Led security risk, compliance, IAM governance, and security posture for cloud applications.
  • Enhanced infrastructure to minimize IAM breaches, and boost compliance with Enterprise solutions.
  • Incorporated technology to identify and resolve problems and further develop processes.

Principal Engineer – Risk & Compliance

Netradyne Inc.
Bangalore
09.2021 - 12.2024
  • Facilitated cloud cost reduction via rightsizing, resource elimination, and automation initiatives.
  • Created effective scripts and tools to enhance resource management efficiency.
  • Coordinated with engineering teams to ensure successful execution of optimization strategies.

Senior Solution Advisor

Deloitte & Touche AERS
Bangalore
02.2019 - 08.2021
  • Performed cloud migration security assessments and supported SOC 2, ISO 27001, and HIPAA audits.
  • Designed secure systems for various cloud components.
    Led projects to integrate regulatory requirements and enhance security posture.
  • Ensured adherence to best practices in open cloud risk and compliance activities.
  • Developed tools for IT environment maturity reviews.

Information Security Consultant

Infosys Ltd.
Bangalore
07.2017 - 02.2019
  • Assessed security for cloud migration projects, promoting secure adoption.
  • Created security accelerators to halve go-live phase time.

Information Security Officer

IDBI Bank
Mumbai
11.2011 - 06.2017

• Implemented and maintained ISMS for data centers.
• Directed efforts, reducing vulnerabilities by 75%.
• Trained over 1500 employees on security principles.

Education

MBA -

National Institute of Technology
Surathkal, Karnataka
08.2009 - 06.2011

B.TECH - Computer Science & Engineering

National Institute of Science And Technology
Berhampur, Odisha
08.2005 - 07.2009

Skills

  • AI/ML security strategies
  • Security assessment
  • Data loss prevention
  • Cloud security architecture
  • Risk and compliance management
  • Data security and privacy
  • Cloud security (Azure, AWS, O365)
  • Identity & Access Management (IAM)
  • DevSecOps
  • Third-party risk management
  • Security audits and assessments
  • Compliance frameworks (ISO 27001, 27701, 27434, 27005, 31000, SOC 2, ISO/SAE 21434, RED EN 18031, HIPAA, NIST SP 800-53, CSA CCM)
  • Product security design (cloud, apps, IoT, data, AI/ML)
  • Security maturity assessment
  • Patch and vulnerability management
  • Team leadership and collaboration

Certification

  • Proofpoint Certified AI Email Security Specialist
  • CCSK (Certificate of Cloud Security Knowledge) v4
  • AZ-500: Microsoft Certified Security Engineer
  • Exam 534: Architecting Microsoft Azure Solutions

Professional Achievements

  • Deployment of SPRINTO GRC Automation Tool at Netradyne (Apr-Sep 2025)
  • RFP Assistant Creation using MS Open AI Platform (Apr-Sep 2025)
  • Designing the Integrated Control Framework (ICF) Dashboard (Jan-Jun 2023)
  • Defining, Designing & Facilitating Audit Readiness for Independent SOC 2/ISO 27001/ISO 27701/HIPAA, ISO/SAE 21434*, RED EN 18031* Audits (Annual, since 2019, * from 2025)
  • Trained over 1500 employees on security principles.

Core Competencies

· AI/ML Security Strategies ■■■■ – Advanced

· Cloud Security Architecture ■■■■ – Advanced

· Risk & Compliance Management ■■■■■ – Expert

· Data Security & Privacy ■■■■ – Advanced

· Identity & Access Management (IAM) ■■■■ – Advanced

· DevSecOps ■■■■ – Advanced

· Third Party Risk Management ■■■■ – Advanced

· Security Audits & Assessments ■■■■ – Advanced

· Compliance Frameworks (ISO 27001/27701/42001, SOC 2, HIPAA, NIST SP 800 53, CSA CCM) ■■■■■ – Expert

· Cloud Security (Azure, AWS, O365) ■■■■ – Advanced

· Product Security Design (Cloud, Apps, IoT, Data, AI) ■■■■ – Advanced

· Security Maturity Assessment ■■■■ – Advanced

· Patch & Vulnerability Management ■■■■ – Advanced

· Team Leadership & Collaboration ■■■■ – Advanced

Personal Philosophy

Honest, Optimistic, Natural, Empathic, Sincere & Transparent (HONEST) at work. Advocate for 'Go Green Go Happy' and enjoying every bit of life.

Languages

English
Proficient (C2)
C2
Hindi
Native
Native

References

References available upon request.

Timeline

Principal Security Specialist

Netradyne Inc.
04.2025 - Current

Senior Security Technologist

Uber
01.2025 - 03.2025

Principal Engineer – Risk & Compliance

Netradyne Inc.
09.2021 - 12.2024

Senior Solution Advisor

Deloitte & Touche AERS
02.2019 - 08.2021

Information Security Consultant

Infosys Ltd.
07.2017 - 02.2019

Information Security Officer

IDBI Bank
11.2011 - 06.2017

MBA -

National Institute of Technology
08.2009 - 06.2011

B.TECH - Computer Science & Engineering

National Institute of Science And Technology
08.2005 - 07.2009
Sudhansu Kumar