Akhtar Ali

CEO

Delhi, India20 yrs 1 mo experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 21 years of experience in GRC and ISMS auditing.
Award winner at the 13th Infosec Maestros 2024.
Expert in ISO 27001, GDPR, and data protection compliance.

Stackforce AI infers this person is a seasoned expert in Information Security and Compliance within the IT industry.

Contact

Skills

Core Skills

CybersecurityInformation Security Management System (isms)

Other Skills

CMMI Level 5ISO 27001OraclePL/SQLProject ManagementSQLUnix Shell ScriptingData GuardOracle ASMUnix adminVB 6.0Crystal ReportsArch Gis MapPerformance TuningRMAN

About

Summary # 21+ years of GRC &, ISMS auditor and CMMMI L5 implementation

Experience

20 yrs 1 mo

Total Experience

5 yrs

Average Tenure

9 yrs

Current Experience

Hfcl limited

2 roles

Sr. Manager

Promoted

Apr 2023 – Present · 3 yrs 1 mo · On-site

Sr. Manager (Information Security & Privacy) – Role & Responsibility
 Lead the development and implementation of the organization's information
security and privacy policies, ensuring compliance with industry standards
(e.g., ISO 27001:2022, ISO 27701:2019, DPDP Act 2022, and GDPR).
 Manage security risk assessments, vulnerability management, and incident
response procedures to protect sensitive information.
 Oversee the security awareness-training program, educating employees on
best practices and emerging threats.
 Collaborate with IT, legal, and compliance teams to maintain a secure and
compliant IT environment.
 Conduct regular audits and assessments to identify potential security
vulnerabilities and recommend corrective actions.
 Serve as the point of contact for external audits and assessments related to
information security and privacy.
 Implement and manage data protection measures, including encryption,
access controls, and data loss prevention strategies.
 Monitor and respond to security incidents, performing root cause analysis and
developing mitigation strategies.
 Manage the incident response team to ensure timely and effective resolution
of security breaches.
 Develop and maintain the disaster recovery and business continuity plans to
ensure organizational resilience.

CybersecurityCMMI Level 5Information Security Management System (ISMS)

Manager (Information Security & Privacy Manager)

Apr 2017 – Mar 2023 · 5 yrs 11 mos · On-site

Lead the development and implementation of the organization's
information security and privacy policies, ensuring compliance with industry
standards (e.g., ISO 27001, ISO 27701, ISO 20K GDPR, HIPAA).
 Manage security risk assessments, vulnerability management, and incident
response procedures to protect sensitive information.
 Oversee the security awareness-training program, educating employees on
best practices and emerging threats.
 Collaborate with IT, legal, and compliance teams to maintain a secure and
compliant IT environment.
 Supported the incident response process, performing initial analysis and
escalation as needed.
 Participated in security audits and assessments, providing documentation
and evidence to auditors.
 Developed and delivered security awareness training to employees

CybersecurityISO 27001Information Security Management System (ISMS)

Himachal futuristic communications limited

Deputy Manager IT

Apr 2012 – Mar 2017 · 4 yrs 11 mos · Delhi, India · On-site

Deputy Manager (IT) – Role & Responsibility
 Led the planning, implementation, and maintenance of the ISO 27001:2013
Information Security Management System (ISMS) across the organization.
 Conducted a comprehensive gap analysis to identify non-compliance with ISO
27001:2013 standards and formulated a corrective action plan.
 Developed and documented information security policies, procedures, and
controls to align with ISO 27001:2013 requirements.
 Conducted risk assessments and managed risk treatment plans to mitigate
information security risks.
 Facilitated training sessions and workshops to educate staff on information
security policies, procedures, and best practices.
 Coordinated internal audits to ensure continuous compliance with ISO
27001:2013 standards and prepared for external audits by certification bodies.
 Monitored and reviewed the performance of the ISMS to ensure its
effectiveness and relevance to the organization’s operations.
 Collaborated with cross-functional teams, including IT, HR, Legal, and
Operations, to ensure seamless implementation of information security
controls.
 Managed communication with stakeholders regarding information security
incidents and implemented incident response procedures.
 Drove continuous improvement initiatives to enhance the organization's
information security posture and achieve certification.

Information Security Management System (ISMS)

Himachal futuristic communications ltd

Assistant Manager IT

Apr 2007 – Mar 2012 · 4 yrs 11 mos · Delhi, Delhi, India · On-site

Assist Manager (Software Developer) – Role & Responsibility
Support for Automated Spectrum Management Software Implementation. This CRM have
implemented for Management of Spectrum & Frequency GOVT Client.
 Analyses and discuss the business requirements with the clients of ERP
implementation.
 Responsible for the development, implementation and support of the database
of the server.
 Ms, Access and Sql Server Database Migration in oracle Database using
 Migration Workbench tool.
 Optimized and modified the triggers, complex store functions, procedures..
 Managed a team for the development of the database, procedures, functions,
 Responsible for the dealing with the problems, bug fixing and troubleshooting.
 Responsible for the analysis, designing and coding of the database.
 Handled the client problems, troubleshoot, and fixed the bugs.
 Provided Oracle database administrative support to Wireless Planning &
Coordination Wing.
 Responsible for Oracle 8i/9i logical and physical databases design,
 Installed, upgraded and patched Oracle software. Setup brand new machines
Including Oracle software installation.
 Migrated and upgraded databases from version 8i to 9i.
 Developed some Unix Shell scripts to automate database operation and
database monitoring.
 Developed or modified some Oracle backup and recovery scripts. Used Oracle
backup utility RMAN to implement Oracle backup and performed a number of
times of disaster recovery.
 Implemented database refresh with the hot backup using DUPLICATE or full
export. Used EXPORT/IMPORT to do table level and full database
defragmentation.
Performed database tuning using Explain Plan, hints, Toad. Provided on-call
production database support

Next era technologies ltd

Software Engineer

Sep 2004 – Dec 2005 · 1 yr 3 mos

Developed Application for ministry of telecom using VB6.0 and Oracle, designing user
interfaces and database schemas. Implemented business logic, optimized SQL queries,
and ensured data integrity. Collaborated with stakeholders to gather requirements and
deliver solutions that improved operational efficiency. This software used for covert
hard copy data into electronic data.