Himanshu Gupta
Senior Expert en Sécurité de l'Information et Gestion des Risques
Salary / Daily rate
Brussels, Belgium
Mobility: Belgium, Germany, ...
Freelance, open to permanent contract
Can come onsite
Skills
Languages
About me
Intro
Cyber Security expert with 15+ years in IT Risk Management, Compliance, and GRC. Currently managing ISO 27001 frameworks and NIS2 compliance at Fortune 500 companies including Allianz and Azelis. Specialized in Third Party Risk Management, DORA regulation, SOX compliance, and enterprise-wide security governance delivering measurable risk mitigation results.
Work experience
Information Security Officer
Azelis
May 2024 - Present
2 years 6 months
Antwerp, Belgium
- Responsible for ISMS governance, risk management, and continuous improvement of the ISO/IEC 27001 framework - Support NIS2 compliance initiatives through conducting gap analysis, policy development, and cross-functional collaboration - Lead internal audit preparations and coordinate external audits
Allianz
Apr 2019 - Dec 2023
4 years 9 months
Hybrid
Senior Manager - Enterprise IT Risk Management
Aug 2022 - Dec 2023
1 year 5 months
Hybrid
2nd line of defense; Enterprise Risk Management Function under CRO. • Responsible for identifying, assessing & monitoring the Non-Financial Risks, Operational Risks, IT Risks & Cyber Security risks across Belgium, Netherlands and Luxembourg offices. • Risk and Control Assessments (RCAs): Responsible for oversight, challenge, advice and support relating to the execution of RCAs in the business teams. • Perform end-to-end IT Controls testing and support the first line function for strengthening IT Risk management, Third Party Risk Management & Business Continuity Management. • Worked with various teams for preparedness on DORA regulation. • Responsible for quarterly reporting of Operational Loss Event Reporting working with Enterprise-wide teams, C level executives & Risk Committee.
Information Security Risk Manager
Apr 2019 - Jul 2022
3 years 4 months
Hybrid
• Headed the Information Security Risk function, reporting to Chief Information Security Officer, Benelux. • Responsible for identifying, assessing & monitoring the risks related to Business Applications, IT Infrastructure, Third Parties, Cloud Services, Penetration Testing, etc across Benelux region. • Define security testing requirements and penetration test scope; actively support the pentesting teams and approve the test reports. • Perform end-to-end risk assessments including reporting the significant risks to C-level executives
Senior IT Auditor
Paddy Power Betfair
Jan 2018 - Jan 2018
1 month
Dublin, Ireland
Information Security Manager
Standard Chartered Bank
Aug 2016 - Dec 2017
1 year 5 months
Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia
• Managed and performed the end-to-end third party security risk assessments. • IT audits of vendors’ Technology infrastructure, OS, networks, databases, data centre, vulnerability assessments, IT security and IT general controls • Project management of outsourced audits to Big four audit firms • Contributed significantly in setting up the new IT Risk framework and Risk assessment questionnaire to foster efficiency and better alignment with local regulatory requirements (MAS etc) • Facilitated complete IT Risk management cycle from Risk Classification to Monitoring
AVP - Third Party Risk Management
JPMorgan Chase & Co.
Jan 2014 - Jan 2016
2 years 1 month
Mumbai Area, India
• Conducted end-to-end IT Audits of JP Morgan’s third party service providers (Software Development, Investment Banking, Legal & HR services vendors) for Asia Pacific Region for Investment Banking division vendors’ portfolio. • Conducted Onsite IT audits across Asia Pacific region • Managed the critical project of outsourced risk assessments working with Big 4 audit firms. • Liaised with JP Morgan USA team for APAC assessments reporting • Participated in the planning and execution of RCSA (Risk Control Self Assessment)
Senior Analyst - IT Compliance
Eaton
Sep 2007 - Dec 2013
6 years 4 months
India and USA
• Led and executed IT validations and assessments for SOX Compliance • Coordinated with External Auditors (Ernst & Young, USA) for audit queries for APAC region • International onsite work experience (4 times travel to USA for work assignments & trainings) • Worked on multiple Security Projects – Vulnerability Assessments, Forensic investigations, DMCA Compliance, Annual Security Council meetings, Intellectual Property Protection Reviews, Disaster Recovery, and Vendor Data Privacy Audits. • People management experience (mentor, coach and helped develop a team of 3 SOX Compliance analysts) • Worked closely with multiple stakeholders from USA, UK, India and Singapore
Software Quality Assurance Engineer
Symantec
Jun 2005 - Oct 2007
2 years 5 months
Pune Area, India
• Worked on Software Quality Assurance (SQA) on Symantec CCS (Control Compliance Suite) product. • CCS is an automation tool for control testing for Compliance Regulations like PCI DSS, SOX, HIPAA, FISMA, GLBA, Basel II, etc. • In-depth testing of technological controls on platforms like UNIX, Netware, Windows, SQL, etc using PERL and SHELL scripts
Intern Software Developer - Project Management Office
Datamatics Global Services Limited
Feb 2005 - May 2005
4 months
Mumbai Area, India · On-site
• Developed a centralized software solution for Project Mgmt team using ASP and SQL 2000 technologies towards CMMi level 5 certification guidelines
Education
Savitribai Phule Pune University
Master’s Degree
2002 - 2005
3 years 1 month
University of Rajasthan
Bachelor’s Degree
1999 - 2002
3 years 1 month