Karanbir Singh Kochar

CEO

Dublin, California, United States20 yrs 10 mos experience
Most Likely To SwitchHighly Stable

Key Highlights

  • Two decades of experience in technology risk and compliance.
  • Led global teams in Cybersecurity and Risk Management.
  • Developed innovative GRC tools and AI Chatbot for efficiency.
Stackforce AI infers this person is a Cybersecurity and Risk Management expert with extensive experience in compliance and audit.

Contact

Skills

Core Skills

CybersecurityRisk ManagementTechnology AuditInternal AuditInformation Security

Other Skills

AuditAudit PlanningBusiness ContinuityBusiness LeadershipCISACISSPClient ManagementClient auditsCommunicationComplianceComputer SecurityControl AdvisoryData AnalysisData PrivacyDisaster Recovery

About

With two decades of experience in technology risk, audit and compliance, I drive strategic programs with precision. I have successfully navigated numerous regulatory examinations, audits, and assessments. As a trusted Cybersecurity and Technology compliance expert, backed by multiple certifications, I have built and led global teams in Cybersecurity, Risk Management, and Audit. My leadership fosters open communication, collaboration, and consistently delivers exceptional results. Core Competencies: - Led Cybersecurity complex resilience audits, ensuring seamless and timely compliance with stringent global regulatory standards. - Established a 1LOD testing program across various Cybersecurity domains, proactively identifying and rectifying control gaps. - Experience in implementing GRC tools and also developed a RAG-based Generative AI Chatbot for Cybersecurity teams, enhancing audit inquiry and response efficiency. - Adept at forging solid relationships with stakeholders and collaborating with them as their trusted advisor and Cyber-SME. - Master’s in electrical engineering with a focus on computer network security. Certifications include CISSP, CCSK, PCI-ISA, CISA, CSM, and PMP.

Experience

Visa

3 roles

Sr. Director - Governance Risk and Compliance (Cybersecurity)

Promoted

Feb 2020Present · 6 yrs 1 mo

  • Mentor, coach, train, provide oversight and align 15+ resources for audit and compliance activities across a global Cybersecurity organization of more than 1000+ professionals.
  • Advise Cybersecurity leadership on the status of audit and compliance issues based on assessment results and remediation activities.
  • Develop data points into Cybersecurity risk management reporting activities, including dashboards, metrics, and executive reporting content.
  • Promote proactive readiness activities and enhancement of Cybersecurity-based internal controls to support future internal and external reviews.
  • Work collaboratively with corporate compliance, internal audit, enterprise risk management and various technical teams in the design and implementation of audit, regulatory, and compliance practices related to Cybersecurity.
  • Manage Cybersecurity and Visa's Technology related Client Onsite/Virtual visits to ensure accurate / timely responses and high quality experience for Visa Clients
Governance Risk and ComplianceCybersecurityAuditComplianceRisk ManagementData Analysis+1

Director Information Technology Audit

Promoted

Jun 2012Feb 2020 · 7 yrs 8 mos

  • Responsible for developing and executing major segments of the Visa Inc. technology audit plan, as approved by the Audit & Risk Committee (ARC) of the Board of Directors.
  • Specific responsibilities include:
  • Managing a team of up to seven technology audit professionals, providing coaching and supervision as well as conducting annual performance reviews, salary administration and career guidance.
  • Performing annual risk assessments by engaging senior executives, developed the audit plan, and reports to the executives, regulators and ARC.
  • Representing Internal Audit at several stakeholder meetings and offered control advisory services to management in a manner that does not compromise the independence and objectivity of Internal Audit.
  • Maintaining strong working relationship with a wide range of technology leaders.
  • Interacting with federal regulators and external auditors on a regular basis
  • Coordinating with other risk management functions to minimize duplication of effort and to ensure that issues raised by their teams are appropriately addressed.
  • Providing guidance to new in-charges to ensure that audits are planned and executed in accordance with department and professional standards. This includes assisting in the design of and approval of the audit scope, work program, and testing plan for each audit assignment. Responsible for documenting or reviewing draft audit findings to ensure issues are appropriately vetted and constructed based on facts. Negotiating with the process owners on risk ratings, and recommending practical solutions.
Technology AuditRisk AssessmentStakeholder ManagementControl AdvisoryTeam ManagementRisk Management

Sr. IT Auditor - Internal Audit

Nov 2008Jun 2012 · 3 yrs 7 mos

  • Responsibilities include:
  • Leading client meetings, negotiating with the process owners, and recommending practical solutions
  • Offer guidance to staff, review their work, and provide them with performance evaluations.
  • Development of audit results in an objective and unbiased manner, and ensuring that the audit reports present technical information clearly and succinctly to a wide variety of audiences.
  • Work with Internal Audit senior management to develop and update the audit plan for the year.
  • Interact with federal and external auditors and respond to their queries in a clear and concise manner.
  • Leading and participating in multiple risk assessments including enterprise wide risk assessments, vendor risk assessments, and application risk assessments. These risk assessment were used to determine future projects
Internal AuditRisk AssessmentClient ManagementAudit PlanningRisk Management

Deloitte & touche

Senior Consultant - Security and Data Privacy Services

Jun 2005Nov 2008 · 3 yrs 5 mos · San Jose, California

  • Karan is a senior Information Security and IT Risk Management professional with over 3 years of progressive experience in managing IT security and privacy projects. Highly skilled at communicating technical and risk concepts to non-technical executives. Extensive experience providing assessment, analysis and strategic planning, and delivering results through practical initiatives.
  • Specialties
  • Security Strategy Development
  • Security Program Governance & Policies
  • Security Risk Assessment
  • Network & Application Security
  • Vulnerability Management
  • Payment Card Industry Data Security Standard
  • Data Privacy
  • Clients served include:
  • Hewlett-Packard (HP)
  • Marvell Semiconductors
  • Microsoft
  • Nikon
  • Sun (Now Oracle)
  • Visa
Security Strategy DevelopmentRisk ManagementData PrivacyVulnerability ManagementInformation Security

Education

University of Southern California

Electrical Engineering — Computer Systems Networking and Telecommunications

Aug 2003Jun 2005

University of Southern California

Master of Science - MS — Electrical engineering

Sep 2003Mar 2005

University of Southern California

MS — Electrical engineering

Jan 2003Jan 2005

D. Y. Patil College of Engineering ( DYPCOE ) , Akurdi, Pune

BE — Electronics Engineering

Jan 1998Jan 2002

Guru Harkrishan Public School

Science

Jan 1988Jan 1998

Stackforce found 100+ more professionals with Cybersecurity & Risk Management

Explore similar profiles based on matching skills and experience