Yash Kumar

Background

About Yash Kumar

As an Information Security Consultant with over 4 years of experience, I specialize in Governance, Risk, and Compliance (GRC), Cybersecurity Strategy, Risk Management, and Program Management (PMO). I’ve led security initiatives across diverse industries, including aviation, banking, finance, and education, implementing/ utilising frameworks such as ISO 27001:2022, NIST CSF, CEA, and SAMA etc. In my role at Deloitte India, I’ve managed end-to-end Information Security Management System (ISMS) implementations, conducted third-party risk assessments, and supported data privacy assessments (GDPR, DPDPA). Acting as a PMO for multiple high-stakes projects, I oversaw cybersecurity initiatives, coordinated project plans and resource allocations, and provided leadership with strategic insights through executive dashboards. My experience includes delivering tailored security awareness programs and designing processes to improve security governance and incident response. Key achievements include driving ISMS implementation for a major aviation organization, drafting IT security policies in line with SAMA and CEA frameworks, and managing third-party risk programs to enhance vendor security compliance. My project management skills allowed me to track project progress, mitigate risks, and ensure alignment with business objectives, delivering measurable outcomes to senior stakeholders. Certified as an ISO 27001:2022, ISO 27001:2013 Lead Auditor and trained in ISO Risk Management, I bring a strong foundation in both cybersecurity frameworks and strategic risk management. My expertise extends to leading audits, risk advisory services, and developing security policies that ensure organizations remain resilient against evolving threats. I am committed to helping organizations strengthen their security postures through effective project management and strategic insights. Let’s connect to discuss how I can contribute to your cybersecurity and risk management initiatives.