Looking for a job

Chandrasekhar singh

@chandrasekharsingh

Message

Information Security Manager at Encora who achieved SOC 1 and SOC 2 Type II certification across three projects.

India

Message

What I'm looking for

I'm seeking Director / Head of Information Security roles with P&L accountability, enterprise budget ownership, and strategic security leadership across global or Fortune 500 environments.

At Encora, I govern enterprise information security strategy and compliance programs aligned with ISO 27001, NIST CSF, PCI-DSS, and SOX. I directed GRC assessments that achieved SOC 1 and SOC 2 Type II certification across three critical projects and reduced audit findings by 60%.

I established vulnerability and patch management programs that improved patch compliance from 72% to 95%, and govern third-party risk across 100+ vendors. I also support security governance across IT, DevOps, Legal, and Business units, including Zero Trust Architecture principles.

Earlier, at Highradius Pvt. Ltd., I managed infrastructure and application security operations for a SaaS FinTech platform, including SAST and DAST assessments, vulnerability remediation, and incident response. Across roles at Amdocs, Computer Associates (Broadcom), Genpact, and General Electric (GE), I developed experience in security operations, network security, compliance auditing, and security architecture. I'm seeking Director / Head of Information Security roles with P&L accountability, enterprise budget ownership, and strategic security leadership across global or Fortune 500 environments.

Experience

Work history, roles, and key accomplishments

Current

Senior Information Security Manager

Current

Encora

Jun 2020 - Present (6 years 5 months)

Governed enterprise information security strategy and compliance programs, achieving SOC 1 and SOC 2 Type II certification and reducing audit findings by 60%. Established vulnerability and patch management programs, improving patch compliance from 72% to 95%.

ISO 27001 NIST CSF PCI DSS SOX SOC 1 SOC II GRC Vulnerability Management Patch Management Third Party Risk Management Zero Trust Architecture IT Disaster Recovery Business Continuity Planning Security Awareness Training Phishing Simulations

Manager, Security & Compliance

Appsassociates LLC

Aug 2019 - Apr 2020 (8 months)

Led offshore information security and compliance operations for a US-based technology firm, executing risk assessments on 20+ vendors and updating security policies. Implemented security awareness programs including privacy training and phishing simulations.

Risk Assessment Vendor Risk Management ISO 27001 NIST CSF SOC Security Awareness Training Phishing Simulations Security Policy Development

Information Security Lead

Highradius Pvt. Ltd.

Aug 2018 - May 2019 (9 months)

Managed end-to-end infrastructure and application security operations for a high-growth SaaS FinTech platform, overseeing security architecture, vulnerability management, and incident response. Directed SAST and DAST assessments aligned with OWASP Top 10 and CVSS scoring.

SAST DAST OWASP Top 10 CVSS Vulnerability Management Incident Response Security Architecture RFP Proof of Concept Endpoint Security SIEM

Progressive Information Security Roles

Computer Associates (Broadcom)

Jan 2004 - Dec 2018 (14 years 11 months)

Built 14+ years of progressive cybersecurity expertise across global enterprises in telecommunications, technology, BPO, and manufacturing sectors, advancing from Security Analyst to Security Lead. Developed broad competencies in security operations, network security, access control, compliance auditing, incident management, and security architecture.

Security Operations Network Security Access Control Compliance Auditing Incident Management Security Architecture