Sudipta R.

About

I am an execution-focused Information Security GRC leader with more than 13 years of experience leading audit readiness, vulnerability remediation, and continuous compliance programs across high-scale IT environments. My focus is on moving compliance from a passive documentation exercise into an active shield against operational risk.Throughout my tenure a at Concentrix, I have coordinated risk assessments, infrastructure control reviews, and mitigation efforts across multiple global geographies. I serve as a trusted liaison between technical teams, external assessors, and global enterprise clients, ensuring that control exceptions are remediated efficiently and compliance commitments are sustained.Selected Professional Highlights:Multi-Framework Audit Leadership: Manage end-to-end audit readiness, control validation, and evidence collection for major standards, securing clean opinions across ISO 27001, PCI DSS, SOX, and SOC 1/SOC 2.Threat & Vulnerability Governance: Direct risk-based infrastructure reviews and patch governance programs, collaborating with technical teams to prioritize and resolve high-risk vulnerabilities.Data-Driven Governance: Architect executive dashboards, audit trackers, and MIS reports that provide leadership with clear, actionable visibility into overall risk posture and remediation progress.Technical & Asset Foundation: Developed foundational expertise in asset tracking and IT lifecycle management at IBM, ensuring robust configuration baseline control and accurate scope determination.Certified as a CISM and CPISI, and actively preparing for CISSP and CISA designations, I stay at the forefront of emerging regulatory demands and security technologies to ensure our governance models remain future-ready.Reach out if you are looking to streamline your compliance pipelines, eliminate manual audit overhead, or scale your vulnerability management programs.Key Domains: IT Risk Analysis | Compliance Control Mapping | Vulnerability Assessment | Patch Management Governance | GRC Platforms | Incident & Change Management | Fraud Investigation | Stakeholder Alignment | Executive Reporting | Technical Auditing

Experience

• Concentrix

  • Senior Manager

    Jul 2024 — Present

    Kolkata

  • Consultant ll

    Jul 2023 — Jun 2024

    Kolkata

  • Consultant I, Security Governance & Compliance

    Jan 2022 — Jun 2023

    Kolkata

9 experiences in total

Education

• Mallabhum Institute of technolgy

  B.tech, Computer science

  Jan 2004 — Jan 2008

• Netaji Nagar Vidya mandir

  10+2, Science

  Jan 2002 — Jan 2004

3 education entries in total