Open to opportunities

Bingi Praveen Kumar

@bingipraveenkumar

Message

I build audit-ready GRC programs that turn complex AI and security risk into enterprise-ready controls.

India

Message

What I'm looking for

I’m looking for a people-leadership mandate to scale AI governance and enterprise security compliance—building audit-ready ERM and SDLC control frameworks, strengthening vendor risk, and delivering posture reporting and readiness roadmaps for evolving regulations.

I’ve architected enterprise GRC and AI Governance programs for Ultra DNS, Persistent Systems, and an independent Fortune 500 engagement with NCR Voyix—translating regulatory mandates into audit-ready frameworks teams can actually run.

At Ultra DNS, I built a NIST CSF-aligned GRC foundation that unlocked $10M+ in enterprise sales, and I’ve consistently reduced audit findings and critical security gaps across Fortune 500 clients. I also led AI Governance work aligned to NIST AI RMF and ISO/IEC 42001, mapping readiness to the EU AI Act and embedding AI risk checkpoints into the enterprise SDLC.

Right now, I’m scaling AI governance operations—covering AI risk assessments, DPIAs/RoPA for GDPR and privacy regimes, enterprise risk registers, and third-party/vendor risk due diligence—so senior leaders get timely posture reporting and clear remediation roadmaps.

Experience

Work history, roles, and key accomplishments

Current

Independent GRC Consultant

Current

NCR Voyix

Nov 2025 - Present (9 months)

Designed and operated AI Governance, Enterprise Risk Management, and Data Privacy capabilities for a Fortune 500 client, establishing an AI governance operating model aligned to NIST AI RMF and ISO/IEC 42001.

AI Governance NIST AI RMF ISO 42001 Risk Assessment Data Privacy GDPR CCPA TPRM Policy Development

GRC Manager — Enterprise Security

Persistent Systems

Jul 2024 - Oct 2025 (1 year 3 months)

Owned enterprise GRC and security compliance across 5 business units, reducing audit findings by 17% and compressing reporting cycles by 30% through automated dashboards.

GRC ISO 27001 NIST CSF AI Governance Risk Assessment Policy Development Data Classification Compliance Reporting

Senior GRC Consultant

Aeries Technologies

Jan 2023 - May 2024 (1 year 4 months)

Built GRC function from ground up for Ultra DNS, achieving SOC 2 Type II attestation and unlocking $10M+ in enterprise sales.

SOC II NIST CSF PCI DSS GDPR HIPAA Security Awareness

Sr. Consultant — Cybersecurity & GRC

Ernst & Young (EY) Global Delivery Services

Dec 2021 - Jan 2023 (1 year 1 month)

Delivered risk assessments, incident response, and security architecture for Fortune 500 clients, leading ISO 27001 implementations with zero major nonconformities.

ISO 27001 Risk Assessment TPRM Security Policy Privacy Training

Senior IT Risk Specialist

Quest Diagnostics (HTAS)

Dec 2020 - Nov 2021 (11 months)

Managed IT risk and compliance for a major clinical laboratory network, reducing cyber risk exposure by 30% through a NIST CSF-aligned remediation program.

NIST CSF Risk Management remediation