Looking for a job

Kuldeep Singh

@kuldeepsingh9

Message

I lead GRC and IT audits, strengthening compliance, risk visibility, and control effectiveness.

India

Message

What I'm looking for

I’m looking to lead GRC and IT audit programs in regulated environments—building audit-ready frameworks, measurable risk dashboards, and strong vendor controls—while mentoring teams and driving zero-defect compliance through structured remediation and executive-ready reporting.

I’m a Senior GRC and IT Audit leader with 14+ years of experience across Governance, Risk & Compliance, IT internal audits, and information security in mission-critical, highly regulated defence environments. I’m currently managing a 5-member GRC team at the Indian Air Force with a proven record of zero major compliance breaches.

My core strength is turning complex risk and control requirements into audit-ready governance that executives can act on. I’ve built executive risk dashboards tracking 10+ key exposure metrics, improving leadership decision-making speed and accuracy by 50% through data-driven risk dashboards, exposure metrics, and structured frameworks.

I specialize in IT risk and compliance, including ITGC testing, ISO/IEC 27001 ISMS implementation and audits, and NIST RMF/CSF-aligned approaches. I also lead Third-Party & Vendor Risk Management (TPRM), conducting vendor assessments and audits across 10+ third-party contractors while strengthening control environments and improving remediation closure by 40%.

Beyond GRC, I bring strong operational security credibility: I’ve managed 500+ servers/endpoints and led cyber incident response, access control reviews, change management governance, and incident root cause analysis to reduce repeat incidents by 50%. I’m recognized with a Chief of Air Staff Commendation (2018), and I’m continually upskilling on enterprise platforms like ServiceNow GRC and JIRA to scale compliance excellence.

Experience

Work history, roles, and key accomplishments

Current

GRC Manager

Current

Indian Air Force

Feb 2022 - Present (4 years 3 months)

Led a 5-member GRC team and delivered zero major compliance breaches, strengthening governance across classified IT environments. Built executive risk dashboards for 10+ exposure metrics, improving leadership decision-making speed and accuracy by 50%, and designed compliance training for 3,000+ personnel.

DPDP Rule 2025

IT Internal Auditor

Indian Air Force

May 2019 - Jan 2022 (2 years 8 months)

Performed IT audits, ITGC testing, and vendor audits across 10+ clients, ensuring security and contractual compliance. Managed audit findings and remediation plans, improving timely closure by 40% and reducing repeat findings through cross-functional follow-through.

IT Audit ITGC Vendor Contract Auditing Compliance Reporting

IT Operations Manager

Indian Air Force

May 2017 - Apr 2019 (1 year 11 months)

Managed 500+ servers, endpoints, and network devices in restricted defense environments, maintaining 99% system availability. Led cyber incident response and root-cause analysis, reducing repeat incidents by 50%, and supervised 20–25 IT team members.

IT Operations Management Incident Response Root Cause Analysis

File Server Administrator

Indian Air Force

May 2015 - Apr 2017 (1 year 11 months)

Administered secure file server environments for 500+ users while enforcing ITGC and ISO/IEC 27001 compliance, achieving 100% successful audit restore rates. Implemented change management and access control processes to prevent unauthorized production changes.

Secure File Server Administration ITGC ISO 27001 Access Control Change Control Enforcement

Full Stack Web Developer

Indian Air Force

May 2014 - Apr 2015 (11 months)

Developed secure internal web applications using PHP, HTML5, CSS3, JavaScript, and MySQL, implementing RBAC to reduce unauthorized access. Automated manual workflows, improving operational efficiency by 30%.

PHP JavaScript CSS3 MySQL RBAC Workflow Automation Access Control

Infrastructure Engineer - Data Center

Indian Air Force

Mar 2012 - Apr 2014 (2 years 1 month)

Supported mission-critical data center operations with 99% uptime, enforcing ISO/IEC 27001 controls across power, cooling, rack management, and hardware lifecycle. Coordinated third-party vendor activities to maintain continuous availability in classified environments.

Data Center Operations ISO 27001