Open to opportunities

Sudhanshu Bisht

@sudhanshubisht

Message

Seasoned Information Security Consultant with extensive expertise in ISMS.

Germany

Message

What I'm looking for

I am looking for a role that allows me to leverage my expertise in information security, with opportunities for leadership and continuous learning in a collaborative environment.

I am a seasoned Information Security Consultant with extensive expertise in implementing Information Security Management Systems (ISMS) and ISO 27001 certification across diverse industries. My experience includes conducting comprehensive IT audits, performing risk analysis, and ensuring data protection. I have a proven track record of leading successful project management initiatives, consistently delivering improved compliance and security outcomes.

Currently, I am completing a comprehensive training program in information security at de-dsb GmbH in Berlin, which is designed to prepare me for leadership roles in the field. My previous roles include working as a Senior Consultant at Deloitte and as an Associate Consultant at DataGuard, where I was responsible for the implementation of ISMS and conducting audits. I am committed to promoting best practices and driving continuous improvement in security workflows and processes.

Experience

Work history, roles, and key accomplishments

Current

Information Security Consultant

Current

de-dsb GmbH

Jun 2024 - Present (1 year)

Currently completing a comprehensive training program in information security, focusing on ISO27001, IT baseline protection, and business continuity management. The program aims to prepare for leadership roles in information security and conducting audits.

ISO 27001 Information Security Management IT Baseline Protection Business Continuity Risk Management

Associate Consultant

DataGuard

Mar 2023 - Oct 2023 (7 months)

Implemented information security management systems (ISMS) across departments, conducted internal and external audits for ISO27001, TISAX, and ISO9001, ensuring certification for external customers.

ISO 27001 TISAX Audit Management Information Security Management System (ISMS)

Senior Information Security Consultant

CGI

Feb 2022 - Oct 2022 (8 months)

Collaborated on IT security projects, responsible for the implementation and maintenance of ISMS, created project plans and guidelines, and acted as the single point of contact for customers regarding ISMS compliance.

Project Management IT Security Stakeholder Management

Senior Consultant

Deloitte GmbH

Jun 2020 - Jun 2021 (1 year)

Provided consultancy in information security, focusing on ISP issues and training. Conducted assessments and implemented training programs, ISMS implementation, and audits.

Training Development Audit Management Risk Assessment

Information Security Consultant

Robert Bosch Engineering and Business Solutions Pvt Limited

May 2015 - Nov 2019 (4 years 6 months)

Ensured information security and data protection within the organization and external projects, conducted audits, and advised on technical and organizational measures.

Data Protection Information Security Management

Finance Consultant

Sapient Technologies

Apr 2014 - Apr 2015 (11 months)

Managed invoice processing and control, ensuring timely payment shipments and realization.

Invoice Management Payment Processing Financial Reporting Project Management

Finance Consultant

Deutsche Bank

Jul 2012 - Mar 2014 (1 year 8 months)

Handled derivative procedures and trade settlements, contributing to project management efforts.

Financial Management Project Management Compliance

Marketing Coordinator

Genpact

Feb 2010 - Jul 2012 (2 years 5 months)

Conducted market research and reporting, creating sales reports and presentations for the retail trade.

Market Research Reporting Sales Presentations Data Analysis Marketing Strategy

Education

Degrees, certifications, and relevant coursework

de-dsb GmbH

Information Security and Business Continuity Expert Training, Information Security

2024 -

Developed and implemented information security strategies as an Information Security Officer (ISO). Applied BSI IT-Grundschutz methodology to secure IT systems and processes. Designed and maintained Business Continuity Management (BCM) systems to ensure organizational resilience. Implemented and optimized Information Security Management Systems (ISMS) in accordance with ISO/IEC 27001. Planned, con

DNV-GL

ISO 27001:2013 Lead Auditor, Information Security

2018 -

Gained comprehensive knowledge of ISO/IEC 27001:2013 standard and ISMS principles. Learned to plan, lead, and conduct internal and external ISMS audits. Applied audit methodologies in line with ISO 19011 and ISO/IEC 17021 standards. Developed skills in audit preparation, evidence collection, reporting, and follow-up. Evaluated compliance, effectiveness, and continual improvement of ISMS. Acquired