Gurdit Sohal

Background

About Gurdit Sohal

Director of own company providing specialized services (Program/ Project Management, audit, Sox, encryption, PCI, compliance, etc.) relating to IT Risk, Security, Controls and regulatory (SOx, Libor, etc) compliance. Experience includes advising and undertaking risk assessments or ensuring compliance in the financial services (investment banking, banks [retail & wholesale], card payments, life and pensions, general insurance) telecommunication and oil & energy sectors.I have managed professional teams of up to 28 or more people (including combination of big four, permanent and contractor staff) covering global, pan-European, or UK projects, reviews and audits (including covering systems and IT controls around ECNs; asset management; credit, fixed income, swaps [vanilla and exotic], shares and other financial trades). My work has covered User Access Management (including IDAM, NPAs, Privilege User Accounts, Robotics), Change Management; Incident Management; SIEM; SDLC/LCM, Physical Access Controls; Cloud based and other TP provided services (including reviews of SOC 1 and 2); In-house or third party security controls and architecture (including Cloud); Vulnerability Management; TSCM, Pen. Test; Static and Dynamic Scanning; Encryption; Key Management; Message Authentication; Confidentiality - Integrity - Availability assessments; Data at Rest and In Transit; and BCP, DR and Backup. Assessed and implemented controls at the Application, DB, network and infra. levels against ISO27001-37, NIST, COSO, CoBIT, ITiL, SANS 20, PCI-DSS, NERC (Industry specific) standards, etc. and enterprise wide architectural models (SABSA and TOGAF)- including against Data Protection and Privacy and other requirements e.g GDPR, LIBOR, Safe Habor, etc.The work has been undertaken using the following IS risk frameworks- CoBIT 5.0, NIST (800-37), ISO 27005, IEC 62443-2-1:2010 (Industrial/ Automation Control Envir.), Octave Allegro (Asset Based), and CESG (Regulated Indust.).