Kharthik Kumar

Background

About Kharthik Kumar

Information Security Officer with 6+ years of expertise in security governance, risk management, and regulatory compliance across Finance and Information Technology sectors. Skilled in developing and implementing information security policies, standards, and procedures aligned with international and local standards (ISO 27001, ISO 27005, PSDC), as well as regulatory frameworks including CSSF Circulars (20/750, 22/806, 24/847, 25/881), DORA, NIS2 and EBA ICT Guidelines. Experienced in ITGC/ITAC audits, developing ISMS SoA, incident response, business continuity and disaster recovery, vulnerability and patch management, and vendor/third-party risk management, with a focus on ensuring compliance, resilience, and effective control implementation. Proficient in risk assessment, KPI/KRI reporting, and audit readiness, having supported various audits as the main point of contact. Hands-on experience with security operations and monitoring using tools such as QRadar SIEM, CyberArk PAM, and Qualys, and actively collaborating with IT and business teams to identify control gaps, implement corrective measures, and strengthen security posture. Also experienced in business continuity management, including gap analysis, Business Impact Analysis (BIA), ISO 22301 control implementation, and disaster recovery planning to safeguard organizational digital assets. Currently pursuing a second master’s in information system security management, gaining advanced insights into Luxembourgish law, regulatory frameworks, enterprise governance, project management, and compliance assurance.