Deepika Nambiar

CEO

Bengaluru, Karnataka, India9 yrs 4 mos experience

Key Highlights

ISO 27001 Certified Information Security Professional
Expert in Risk Management and Compliance
Proven experience in Third Party Risk Management

Stackforce AI infers this person is a seasoned Information Security professional with expertise in compliance and risk management.

Contact

Skills

Core Skills

Risk ManagementRegulatory ComplianceInformation Security Management System (isms)

Other Skills

IT control designRisk assessmentsData privacyCloud securitySOX complianceRegulatory assessmentsGap assessmentsISO 27001:2013 complianceThird Party Risk AssessmentsInformation Security trainingPolicy design and reviewData GovernanceISO StandardsGap AnalysisThird Party Risk Management (TPRM)

About

An ISO 27001 Certified Information Security Professional with experience in Gap Assessments, ISMS Internal Review, Third Party Risk Management ,Cloud and Data Privacy assessments ,Compliance Adherence with respect to various standards like ISO 27001, SOX compliance,PCI DSS,GDPR and other regulatory requirements.

Experience

Deloitte

Lead Solution Advisor

Dec 2025 – Present · 4 mos

First abu dhabi bank (fab)

Senior Analyst (Tech.GRC)

Jul 2024 – Dec 2025 · 1 yr 5 mos · Bengaluru, Karnataka, India

Shell

2 roles

Security and Compliance Advisor

Promoted

Nov 2022 – Jul 2024 · 1 yr 8 mos

IT control design and implementation based on the risk identified across applications on Shell landscape.Conducting Risk
assessments including Data privacy, Cloud security ,SOX and other regulatory assessments.

IT control designRisk assessmentsData privacyCloud securitySOX complianceRegulatory assessments+2

IM Business Analyst

Sep 2021 – Nov 2022 · 1 yr 2 mos

Alshaya group

Information Security Administrator

Jul 2017 – Sep 2021 · 4 yrs 2 mos · India

Conducting gap assessments to assess compliance to ISO 27001:2013 standards Internal System, ISMS Implementations as per ISO 27001:2013 standards. Performing Third Party Risk Assessments as per given RA methodologies to identify security risks. Conducting Information Security sessions and trainings to impart Information Security awareness to various departments and stakeholders and as part of orientation of employees. Also helping the clients to identify gaps in data governance practices and presenting them to stakeholders from business perspective, Designing, Reviewing and Updating Information Security Policies and Procedures.

Gap assessmentsISO 27001:2013 complianceThird Party Risk AssessmentsInformation Security trainingPolicy design and reviewInformation Security Management System (ISMS)+1