KAPIL MISHRA

Associate Partner

Delhi, India15 yrs 3 mos experience

Most Likely To SwitchAI ML Practitioner

Key Highlights

Expert in Security Compliance and Audit leadership.
Proven track record in developing cybersecurity strategies.
Skilled in managing complex security frameworks.

Stackforce AI infers this person is a Cybersecurity Expert with extensive experience in Security Compliance and Risk Management.

Contact

Skills

Core Skills

Information Security ConsultingSecurity Policy Development

Other Skills

Security PolicyVulnerability AssessmentPenetration TestingNessusNmapQualysFoundStoneMetasploitBacktrackISO 27001ISO 27001 ImplementationIT GRCNetwork SecurityInformation SecurityIT Service Management

About

Leading the charge in Security Compliance and Audit at SBI Card, my mission is to uphold the highest standards of cyber protection. With over three years of experience as a Security Architect at Ericsson, I crafted robust security frameworks and spearheaded strategic risk management initiatives. Our collective efforts bolstered the organization's defenses against a dynamic threat landscape. The transition to my current role at SBI Card builds upon a solid foundation in information security, honed through prior experience as a Cyber Security Consultant. By developing and executing comprehensive cybersecurity strategies, our team ensures the integrity of critical systems, echoing my commitment to creating a secure cyber environment.

Experience

Sbi card

DVP Security Compliance and Audit

Oct 2024 – Present · 1 yr 5 mos · Gurugram, Haryana, India · On-site

Ericsson

Security Architect

Nov 2021 – Oct 2024 · 2 yrs 11 mos · India

National institute of smart governance

Cyber Security Consultant

May 2019 – Nov 2021 · 2 yrs 6 mos · Greater Delhi Area · On-site

Information Security ConsultingSecurity Policy DevelopmentSecurity Policy

Genpact

Information Security Manager

Sep 2016 – May 2019 · 2 yrs 8 mos · Gurgaon, India

Manager Information Security
Manage PCI DSS and ISO 27001 certificate for Genpact Global Compliance.

Evalueserve

Assistant Manager - Information Security & Business Continuity

May 2015 – Aug 2016 · 1 yr 3 mos · Gurgaon, India

Assistant Manager Information Security and Business Continuity.

Fis

4 roles

Assistant Manager Information Security

Mar 2015 – May 2015 · 2 mos

Assistant Manager Information Security

Feb 2013 – Mar 2015 · 2 yrs 1 mo

Based out of Manila Philippines, I am part of International Compliance Team. I am responsible for managing Information Security for South East Asia Offices of FIS Global.
Also working as Information Security Officer (ISO) for Manila office. Responsible for:
1. Compliance Maintenance for all the processes services out of the location.
2. ISO 27001, PCI DSS certification implementation and maintenance for the location.
3. Facing Client assessment w.r.t. information Security.
4. Day to day compliance activity.

Information Security Engineer ( International Compliance Team)

Promoted

Nov 2012 – Jan 2013 · 2 mos

Joined International Compliance Team of FIS Global India.
Responsibilities:
Manage International Compliance Projects.

Information Security Engineer ( Security Testing Team)

Apr 2011 – Nov 2012 · 1 yr 7 mos

Working as Information Security Engineer at FIS Global, Gurgaon, as the part of Security Testing Team (STT) for India and Philippines. Responsible for Vulnerability Assessment, Penetration Testing and Consulting requirements for different compliance such as PCI, ISO 27001,etc. for FIS.
I was the first member of the India STT, and worked through to establish Security Testing Team(STT) in India.
Job Description Includes:
Quarterly Vulnerability Scanning for PCI Compliance(internal & External) for all devices in scope for PCI all over the world(for FIS).
Annual Penetration Testing for PCI Compliance.
Any other VA and PT Work need to be conducted.
Network Security Audit
Tools Uses:
1. Qualys Guard
2. Qualys PCI Merchant
3. Foundstone.
4. Nessus
5. Nmap
6. Metasploite
7. BackTrack, etc.

Tvsnet technologies

Executive Presales

May 2010 – Mar 2011 · 10 mos

Worked as a Pre-Sales Executive at TvsNet Technologies Ltd. Gurgaon. Responsible for Consulting and Designing solutions for the clients in the domain of Data Networking and Security(Switches, Routers, Firewall, Survillance, Access Control System, etc) from the OEMs like HP(H3C & 3COM), Juniper, Avaya(Nortel), Cisco, etc.
Job Description Includes:
Meeting the clients.
Understand their network and deployment.
Understand their pain areas in their network.
Consult for the better option they can opt for or
Design the best solution possible to help them perform at their best.

Isec services pvt.ltd., mumbai

Intern

May 2009 – Jun 2009 · 1 mo

I have done my summer internship at iSec Services Pvt. Ltd., Mumbai. As an intern i worked on Data forensics, Copyright Violation Evidence collection. For my final project i was given a project from CERT India, in which i have to do a Vulnerability Assessment and Penetration Testing for a Web Server and a Mail Server. The Web Server which we were given was running on Windows 2003 machine and was hosted using IIS 6.0, and the Mail Server was running on Red Hat Linux. We used some tools for the Vulnerability Assessment such as Nmap, Nessus, Acunetix. For the Penetration Testing we were give two tasks in which we had to bypass the authentication and create a file on the Web Server. For this we used Metasploit Framework.
for any querry feel free to contact me @ kapilmishra06@gmail.com