# Chandrasekhar singh Chandrasekhar singh is a remote worker on Himalayas, Senior Information Security Manager at Encora, based in India. Source: https://himalayas.app/@chandrasekharsingh ```text Information Security Manager at Encora who achieved SOC 1 and SOC 2 Type II certification across three projects. ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | India | | Authorized to work in | India | | Salary expectations | 4535k+ INR | | Job categories | Information Security Executive, Director of Information Security, Head of Information Security | | Skills | Infosec, Security Program Management, Governance Risk and Compliance (GRC), ISO 27001, NIST CSF, SOC 1, SOC II, PCI DSS, GDPR, SOX, Cloud Security, Azure, AWS Security, Microsoft AZ 500, C900 | | LinkedIn | https://linkedin.com/in/chandrasekhar-singh-995781a | ## What I'm looking for ```text I'm seeking Director / Head of Information Security roles with P&L accountability, enterprise budget ownership, and strategic security leadership across global or Fortune 500 environments. ``` ## About ```text At Encora, I govern enterprise information security strategy and compliance programs aligned with ISO 27001, NIST CSF, PCI-DSS, and SOX. I directed GRC assessments that achieved SOC 1 and SOC 2 Type II certification across three critical projects and reduced audit findings by 60%. I established vulnerability and patch management programs that improved patch compliance from 72% to 95%, and govern third-party risk across 100+ vendors. I also support security governance across IT, DevOps, Legal, and Business units, including Zero Trust Architecture principles. Earlier, at Highradius Pvt. Ltd., I managed infrastructure and application security operations for a SaaS FinTech platform, including SAST and DAST assessments, vulnerability remediation, and incident response. Across roles at Amdocs, Computer Associates (Broadcom), Genpact, and General Electric (GE), I developed experience in security operations, network security, compliance auditing, and security architecture. I'm seeking Director / Head of Information Security roles with P&L accountability, enterprise budget ownership, and strategic security leadership across global or Fortune 500 environments. ``` ## Experience ### Senior Information Security Manager (current) [Encora](https://himalayas.app/companies/encora). Jun 2020 - Present ```text Governed enterprise information security strategy and compliance programs, achieving SOC 1 and SOC 2 Type II certification and reducing audit findings by 60%. Established vulnerability and patch management programs, improving patch compliance from 72% to 95%. ``` Skills: ISO-27001, NIST-CSF, PCI-DSS, SOX, SOC-1, SOC-II, GRC, Vulnerability-Management, Patch-Management, Third-Party-Risk-Management, Zero-Trust-Architecture, IT-Disaster-Recovery, Business-Continuity-Planning, Security-Awareness-Training, Phishing-Simulations ### Manager, Security & Compliance Appsassociates LLC. Aug 2019 - Apr 2020 ```text Led offshore information security and compliance operations for a US-based technology firm, executing risk assessments on 20+ vendors and updating security policies. Implemented security awareness programs including privacy training and phishing simulations. ``` Skills: Risk-Assessment, Vendor-Risk-Management, ISO-27001, NIST-CSF, SOC, Security-Awareness-Training, Phishing-Simulations, Security-Policy-Development ### Information Security Lead [Highradius Pvt. Ltd.](https://himalayas.app/companies/highradius). Aug 2018 - May 2019 ```text Managed end-to-end infrastructure and application security operations for a high-growth SaaS FinTech platform, overseeing security architecture, vulnerability management, and incident response. Directed SAST and DAST assessments aligned with OWASP Top 10 and CVSS scoring. ``` Skills: SAST, DAST, OWASP-Top-10, CVSS, Vulnerability-Management, Incident-Response, Security-Architecture, RFP, Proof-of-Concept, Endpoint-Security, SIEM ### Progressive Information Security Roles [Computer Associates (Broadcom)](https://himalayas.app/companies/broadcom). Jan 2004 - Dec 2018 ```text Built 14+ years of progressive cybersecurity expertise across global enterprises in telecommunications, technology, BPO, and manufacturing sectors, advancing from Security Analyst to Security Lead. Developed broad competencies in security operations, network security, access control, compliance auditing, incident management, and security architecture. ``` Skills: Security-Operations, Network-Security, Access-Control, Compliance-Auditing, Incident-Management, Security-Architecture ### Progressive Information Security Roles [Amdocs](https://himalayas.app/companies/amdocs). Jan 2004 - Dec 2018 ```text Built 14+ years of progressive cybersecurity expertise across global enterprises in telecommunications, technology, BPO, and manufacturing sectors, advancing from Security Analyst to Security Lead. Developed broad competencies in security operations, network security, access control, compliance auditing, incident management, and security architecture. ``` Skills: Security-Operations, Network-Security, Access-Control, Compliance-Auditing, Incident-Management, Security-Architecture ### Progressive Information Security Roles General Electric (GE). Jan 2004 - Dec 2018 ```text Built 14+ years of progressive cybersecurity expertise across global enterprises in telecommunications, technology, BPO, and manufacturing sectors, advancing from Security Analyst to Security Lead. Developed broad competencies in security operations, network security, access control, compliance auditing, incident management, and security architecture. ``` Skills: Security-Operations, Network-Security, Access-Control, Compliance-Auditing, Incident-Management, Security-Architecture ### Progressive Information Security Roles [Genpact](https://himalayas.app/companies/genpact). Jan 2004 - Dec 2018 ```text Built 14+ years of progressive cybersecurity expertise across global enterprises in telecommunications, technology, BPO, and manufacturing sectors, advancing from Security Analyst to Security Lead. Developed broad competencies in security operations, network security, access control, compliance auditing, incident management, and security architecture. ``` Skills: Security-Operations, Network-Security, Access-Control, Compliance-Auditing, Incident-Management, Security-Architecture ## Education ### ISACA CISM: Certified Information Security Manager, Information Security Management ```text Currently pursuing the Certified Information Security Manager (CISM) certification from ISACA. ``` ### Microsoft SC-900: Microsoft Security, Compliance, and Identity Fundamentals, Security, Compliance, and Identity. 2021 - 2021 ```text Earned the Microsoft Security, Compliance, and Identity Fundamentals (SC-900) certification in 2021. ``` ### Microsoft AZ-500: Microsoft Azure Security Technologies, Cloud Security. 2021 - 2021 ```text Earned the Microsoft Azure Security Technologies (AZ-500) certification in 2021. ``` ### ISACA CISA: Certified Information Systems Auditor, Information Systems Auditing. 2011 - 2011 ```text Earned the Certified Information Systems Auditor (CISA) certification from ISACA in 2011. ``` ### St. Patrick's Degree College, Osmania University Bachelor of Computer Application, Computer Application. 2001 - 2004 ```text Bachelor of Computer Application (B.C.A) from St. Patrick's Degree College, Osmania University, Hyderabad, India, from 2001 to 2004. ``` ## Tech stack - Microsoft Azure - Azure To contact Chandrasekhar, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Niranjan G](https://himalayas.app/@niranjang): Senior IT & Cloud Security Manager, Plivo, Inc. - [Yuvaraaj D](https://himalayas.app/@yuvaraajd): Chief Information Security Officer, Exafluence - [Zafar Uddin](https://himalayas.app/@zafaruddin): VP Information Security & Infrastructure, Broadcast Audience Research Council - [Aswinkumar Azhakesan](https://himalayas.app/@aswinkumarazhakesan): Cybersecurity Consultant, Societe Generale - [Dipakkumar User](https://himalayas.app/@dipakkumaruser): Assistant General Manager, Savista Global Solutions Pvt Ltd - [Renu Negi Sharma](https://himalayas.app/@renunegisharma): AVP / Director IT Risk, Genpact - [mainak biswas](https://himalayas.app/@mainakbiswas1): Head – Enterprise Delivery, Kapstone Technological Services LLP - [Guru Prasad Patnaik](https://himalayas.app/@guruprasadpatnaik): Head of Security & Privacy, MoEngage - [Pradeep Jagtap](https://himalayas.app/@pradeepjagtap): Domain Security Partner, ANZ Bank - [Sujoy Mahalder](https://himalayas.app/@sujoymahalder): Chief Information Security Officer, Cashpor Micro Credit