Open to opportunities

Harshvardhan Singh

@harshvardhansingh4

Message

Cyber Security Manager blending IT GRC and cloud security to reduce enterprise risk.

India

Message

What I'm looking for

I’m looking for a role where I can lead end-to-end cyber security and GRC programs—combining cloud security, TPRM, and automation—while building OT/IIoT and AI risk governance capabilities in a collaborative, compliance-ready environment.

I’m a Cyber Security Manager and IT Risk Consultant with 6+ years of experience leading information security, Governance Risk and Compliance (GRC), and cloud security programs. I focus on advising clients on ISO 27001, NIST CSF, GDPR, and SOC 2 implementations to strengthen security maturity and compliance readiness.

I’ve designed security architecture for hybrid and Azure cloud environments, deploying enterprise security stacks that include next-gen firewalls, IDS/IPS, WAF, EDR, and Zero Trust access controls. I also perform cloud security assessments that identify misconfigurations and enforce CIS Benchmarks and CSPM best practices.

My work spans security operations and assurance—SIEM/SOC operations, incident response, vulnerability management, VAPT, and OWASP Top 10 remediation support. I build and operationalize GRC automation and Third-Party Risk Management (TPRM) workflows to reduce manual effort and accelerate vendor onboarding cycles.

I also build specialized capabilities across OT/IIoT and emerging AI risk governance. From aligning OT security with IEC 62443 to establishing AI Risk Management and AI Governance practice, I help clients operationalize controls, policies, and secure-by-design behaviors that stand up to real-world risk.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Manager

Current

Alvarez & Marsal

May 2024 - Present (2 years 1 month)

Led 10+ cyber security consulting engagements across BFSI, manufacturing, and technology clients, improving security maturity through ISO 27001 and NIST CSF advisory. Designed hybrid/Azure security architectures, deployed security stacks (firewalls, IDS/IPS, WAF, EDR, Zero Trust), and implemented GRC automation and TPRM workflows to reduce manual compliance effort.

ISO 27001 NIST CSF GRC Azure Security Zero Trust

IT & Cyber Specialist

Pinkerton

Feb 2023 - May 2024 (1 year 3 months)

Led Azure migration and cloud infrastructure security hardening for the global IST team, ensuring high availability and supporting 24/7 operations. Built global network and endpoint defenses using Zscaler, Trellix, and CrowdStrike, and advanced security assurance with VAPT and CI/CD integrated AppSec (SAST/DAST), while driving GDPR privacy-by-design and cross-border data transfer.

Azure Migrate Network Security Zscaler Trellix XDR Crowdstrike Privacy By Design CI CD Security

Cyber Security Administrator

Virtually Testing Foundation

Jan 2023 - Mar 2023 (2 months)

Supported cyber security administration activities while contributing to security-related work during the internship period.

Cybersecurity Administration Security Operations Reporting

Assistant Manager, IT Security

Reliance Industries Limited

Mar 2019 - Feb 2023 (3 years 11 months)

Provided 24x7 Level 1 SOC support by triaging alerts from SIEM, Microsoft Defender, and Genetec, escalating confirmed incidents to CSIRT. Maintained continuous ISO 27001 and ITGC compliance via scheduled audits/gap closures, operated vulnerability scanning and patch reporting, authored ISMS/ITGC/TPRM and data privacy policies, and used SAP GRC for audit findings and SoD analyses.

ISO 27001 SOC Operations SIEM Incident Response Vulnerability Management SAP GRC IT Security Governance Privacy Policies