Sandeep Goyal

Experience

• 

  ISA

  Aug 2015 - May 2016

  Robotics Head

  ISA is an organization of engineers, technicians, and others who work in the field of instrumentation, measurement, and control of industrial processes.

• 

  Intellectual Property Rights Cell

  Sept 2015 - May 2016

  Event Manager

  IPR Cell is a student organisation where the students are encouraged for research work and helped to file patents and aware the other students.

• 

  ISA BVP

  May 2016 - May 2017

  President

  ISA BVP is the student chapter of International Society of Automation which is actively involved in imparting technical and automation skills among students.

• 

  TEDxBVCOE

  Nov 2016 - May 2017

  Event Manager

  In the spirit of ideas worth spreading, TEDx is a program of local, self-organized events that bring people together to share a TED-like experience. At a TEDx event, TEDTalks video and live speakers combine to spark deep discussion and connection in a small group. These local, self-organized events are branded TEDx, where x = independently organized TED event. The TED Conference provides general guidance for the TEDx program, but individual TEDx events are self-organized.

• 

  Strategy and Consulting Club, IIM Shillong

  Jul 2017 - Mar 2019

  Office Bearer
• 

  Shree Cement Ltd.

  Apr 2018 - May 2018

  Summer Intern

  Research on Insolvency Regime in India and Insolvency and Bankruptcy Code 2016

• 

  Deloitte India (Offices of the US)

  May 2019 - now

  Working as a Senior Solution Advisor in the Cyber Risk Advisory practice of Deloitte USI. Experience in helping clients across industries in the following:• Conduct enterprise risk assessments and maturity review for clients’ information security program• Assist clients in the implementation of information security laws, regulations, and standards such as NIST CSF, NIST 800 Series, ISO 27001, and ISO 27005• Document initiatives and recommendations for clients to assist them in addressing identified risks, capability gaps against industry practices to enhance their overall information security program to help them achieve their desired target maturity state• Draft information security policies and procedures for clients in alignment with industry standards and regulations such as NIST 800 Series, and ISO 27001• Prepare dashboards for executive reporting based on metrics such as Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)• Compliance: Developing integrated control frameworks leveraging NIST CSF v1.1, NIST 800-53, MARS-E v2.0, HIPAA, HITRUST, FedRAMP, CSA CCM v3.0.1• Business Continuity and Disaster Recovery: Perform cyber resilience assessments, conducting DR Audits and designing cyber recovery solutions (Isolated Cyber Vault)• Program management (ensuring project implementation using various trackers and status reports) Show less Working as a Lead Solution Advisor in the Cyber Risk Advisory practice of Deloitte USI. Experience in helping clients across industries in the following:• Conduct enterprise risk assessments and maturity review for clients’ information security program• Assist clients in the implementation of information security laws, regulations, and standards such as NIST CSF, NIST 800 Series, ISO 27001, and ISO 27005• Document initiatives and recommendations for clients to assist them in addressing identified risks, capability gaps against industry practices to enhance their overall information security program to help them achieve their desired target maturity state• Draft information security policies and procedures for clients in alignment with industry standards and regulations such as NIST 800 Series, and ISO 27001• Prepare dashboards for executive reporting based on metrics such as Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)• Compliance: Developing integrated control frameworks leveraging NIST CSF v1.1, NIST 800-53, MARS-E v2.0, HIPAA, HITRUST, FedRAMP, CSA CCM v3.0.1• Business Continuity and Disaster Recovery: Perform cyber resilience assessments, conducting DR Audits and designing cyber recovery solutions (Isolated Cyber Vault)• Program management (ensuring project implementation using various trackers and status reports) Show less

  • Senior Solution Advisor

    May 2022 - now

  • Lead Solution Advisor

    May 2021 - May 2022

  • Solution Advisor

    May 2019 - May 2021