Apurva Singh

Experience

• 

  Reliance Industries Limited

  Sept 2017 - Dec 2021

  • Successfully implemented and managed TPRM processes, resulting in enhanced vendor risk identification, assessment, and mitigation strategies.• Led the implementation of an Information Security Management System (ISMS) based on ISO 27001 standards, India’s IT laws and regulations and business requirements, resulting in zero-finding external audits for 3 years.• Supported internal and external audits, ensuring compliance and adherence to standards. Including control owner guidance for enterprise compliance.• Led information security governance, risk management, and compliance efforts to align with technology initiatives and business changes Show less

  • Corporate Information Security Manager

    May 2021 - Dec 2021

  • Security Executive

    Sept 2017 - Apr 2021
• 

  Amazon

  Apr 2022 - May 2023

  Manager I loss prevention

  •Spearheaded policy-level revisions by analyzing Amazon's Indian market policies, benchmarking them against industry standards, resulting in a significant loss reduction• Developed and implemented PBI dashboardsto enhance team performance and decision-making.• Functioned as a Project Manager and orchestrated project kickoffs, progress tracking, closure activities, and stakeholder engagements, ensuring alignment with organizational objectives.• Led third-party risk assessments for contractors, ensuring compliance and mitigating potential risks to Amazon Show less

• 

  EY

  May 2023 - now

  Senior Consultant

  Responsible for executing client-related engagements in the areas of-• Authored and meticulously crafted over 50 cross-domain ISMS documents, including policies, procedures, and guidelines, ensuring clarity, comprehensiveness and compliance with ISO 27001, NIST and CIS requirements.• Developed and maintained comprehensive ISMS governance, risk, and compliance (GRC) frameworks along with implementing One Trust (tool), ensuring alignment with regulatory requirements and industry standards.• Engineered substantial improvements in TPRM program through targeted initiatives, resulting in a tangible decrease in risk exposure and 100% demonstrable alignment to SSAE 18 standard via SOC1 and SOC2 reports.• Enhanced the data protection workflows including DSAR mechanisms, updating policies and process guidance resulting in increased compliance with GDPR.• Collaborated closely with Infosec, Legal, ERM, business and development teams, to ensure identification of data privacy issues in new projects.• Played a key role in facilitating successful ITGC audits, control testing, SOC 1 audit for regulatory compliance, resulting in zero findings in 3rd party audits.• Provided guidance and support to business units on security-related matters, promoting a culture of security awareness & accountability. Including executing global phishing simulations and reducing click rates by 15% Show less