Suvendu Das

Background

About Suvendu Das

Information Security & Risk Management professional with 12 years of overall experience, including 6 years specializing in information security, risk assessment, and compliance management. Skilled in driving ISO 27001 and SOC 2 initiatives that strengthen governance, enhance risk visibility, and ensure regulatory alignment for global organizations. Currently working as a Principal Consultant at CyberNxt Solutions LLP, where I lead ISO 27001 implementations, conduct internal audits, and develop comprehensive information security frameworks tailored to business needs. I collaborate closely with cross-functional teams and client stakeholders to embed security controls that are both practical and compliant. Key strengths include:*Leading end-to-end ISO 27001 audit and implementation programs, ensuring full lifecycle readiness from gap assessment to certification.*Supporting SOC 2 readiness assessments and control mapping for clients.*Performing comprehensive risk assessments and mitigation planning aligned with organizational objectives.*Designing and developing information security policies, standards, and procedures to establish robust governance. Certified as an ISO 27001 Lead Implementer, I combine technical understanding with a business-focused mindset to deliver measurable security outcomes. I bring a strong combination of strategic information security leadership and hands-on technical expertise, including:*Network & Infrastructure Security Architecture and secure network design *Firewall & WAF Administration (Cisco ASA, Checkpoint, FortiGate, NSFocus)*VPN Configuration & Secure Connectivity (IPSec, TLS, Mutual TLS)*Cryptography, PKI, and Data Protection Techniques *Routing & Switching and high availability setups.*Security Protocols (SSL/TLS, IPSec, SSH)*IT Service Management & Incident Response (Helios, HPSM, Redmine) Passionate about building resilient, risk-aware, and compliant security programs that balance regulatory requirements with operational efficiency. Open to global opportunities in Information Security Management, GRC, and Risk Leadership roles.