Ridhi Kumar

Background

About Ridhi Kumar

Accomplished Cybersecurity professional with 15+ years of experience in designing and implementing security strategies and solutions across diverse industries, with a regulatory focus. Expertise includes Data security, Secure by Design, Data protection and lifecycle management through cataloguing, lineage and DFDs, Data classification and labelling, Network security segmentation, and Identity and Access Management (IAM). Proven experience to assess and uplift security controls, conduct security impact assessments based on standards and guidance from NIST, NIS-D, DSPT, and deliver compliance with regulatory frameworks/directives such as FCA, PRA, HKMA, MAS, ECG, EBA, DORA, and NIS2. Strong background in architecting and deploying technical solutions related to Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Data classification and Rights management, Unstructured and Structured data discovery, and Data governance. Possess a deep understanding of data resilience, disaster recovery (DR), and business continuity planning (BCP), with experience in strategy and implementation for critical industries such as banks, healthcare, IT, and utilities. Key achievements- Led cross-functional security teams as part of a $27 million global security transformation initiative for Standard Chartered bank, focusing on data security and data protection service enhancement, capability uplift, and new service introduction- Spearheaded digital security triage process design (covering security impact assessment) through a gated approach designed in ServiceNOW to help shift security left by having tollgates in place for major release changes and new service introduction for Standard Chartered bank- Supported implementation of centralized IAM programme as the foundation for a Zero-trust model and single source of truth for identity management and access recertification- Developed a comprehensive three-year strategy, roadmap, Target Operating Model, and Center of Excellence (CoE) teams to establish a centralized Data Security, Protection & Data resilience Program for leading Nordic manufacturing company- Led the design of DLP, Data Classification, and Rights Management controls to protect critical data and meet compliance requirements. Worked closely with the CISO, legal, and compliance teams on control design for one of the world’s largest banks- Leading and managing multiyear data protection, retention and deletion programme for Nordic bank- Leading and managing multiyear Secure by design implementation programme.