Kasi Desh

Results-driven Information Security & GRC professional with 13+ years of experience at TCS, specializing in security governance, risk management, compliance, and audit leadership. Proven expertise in ISO 27001, NIST, and SOC 2 frameworks. Recently enhanced skills through hands-on cyber security training.

Assistant Consultant / Information Security Manager - Tata Consultancy Services (TCS)

(2006 - 2026-04)

• Managed large-scale customer audits
• Provided security inputs for RFP
• Conducted risk assessments
• Ensured ISO 27001, NIST, SOC2 compliance
• Coordinated with cross-functional teams
• Reviewed VA/PT reports
• Maintained audit documentation
• Led security awareness programs
• Understand client security requirements for RFS and align with organizational security standards.
• Assess security risks related and proposed solutions and suggest mitigation strategies.
• Develop security-focused solutions, ensuring compliance with industry standards (ISO 27001, NIST, SOC2, etc.).
• Work with security architects to define role-specific security competencies.
• Stakeholder Coordination with Admin, IS, HR etc
• Collaborate with security teams, hiring managers, and clients to align security expectations.
• Facilitate approvals from security governance bodies.
• Cost, Budget & Compliance Alignment:
• Ensure security investments align with budgetary constraints and risk appetite.
• Work with finance and legal teams to address security-related contract clauses.
• Approval, Documentation & Audit Readiness
• Maintain records of security roles, approvals, and compliance documentation.

Desktop Engineer - I Flex Solutions Ltd

(2006 - 2006)

Support Engineer - HCL Infosystems

(2003 - 2005)

Support Engineer - Systek Computers

(2000 - 2003)

Diploma - Electronics & Communication (1999)