Kumar Vivek

Accomplished Cybersecurity & Data Privacy Executive with 17+ years of experience leading enterprise-wide privacy governance, cybersecurity risk management, security architecture, SOC transformation, regulatory compliance, and operational risk programs across Retail, Telecom, and Enterprise environments. Proven expertise in designing and implementing privacy governance frameworks, conducting privacy risk assessments, supporting GDPR and DPDP Act compliance initiatives, and aligning enterprise security programs with globally recognized frameworks including NIST CSF, NIST RMF, ISO 27001, COBIT, ITGC, GDPR, and enterprise operational risk frameworks. Currently serving as Assistant General Manager – Cybersecurity, Privacy & Risk Governance at Avenue Supermarts Limited (DMart), leading enterprise cyber governance, third-party risk management (TPRM), privacy governance initiatives, executive risk reporting, and security compliance programs.

Recognized for driving enterprise governance transformation, strengthening privacy and security controls, enhancing cyber resilience, and advising executive leadership on technology risk, privacy compliance, and enterprise security strategy.

Assistant General Manager – Cybersecurity, Privacy & Risk Governance at Avenue Supermarts Limited (DMart) (2025-11 – Present)

• Lead enterprise-wide cybersecurity governance, privacy governance, technology risk monitoring, and security oversight initiatives.
• Develop executive cyber risk dashboards, KRIs, governance MIS, and privacy compliance reporting for senior leadership.
• Lead Third Party Risk Management (TPRM) including vendor security and privacy assessments, remediation governance, and executive reporting.
• Conduct privacy risk assessments and support implementation of privacy controls aligned with GDPR and DPDP Act requirements.
• Support implementation of data retention, access governance, and sensitive data protection controls across enterprise platforms.
• Collaborate with legal, compliance, infrastructure, and business teams on privacy governance and data protection initiatives.
• Drive enterprise governance transformation aligned with NIST CSF, NIST RMF, ISO 27001, and enterprise privacy frameworks.

Security & Privacy Consultant – Governance, Architecture & Risk at Nokia Solutions & Networks (2021-09 – 2025-11)

• Led cybersecurity architecture reviews, SOC modernization initiatives, and enterprise threat monitoring programs.
• Supported governance alignment with enterprise security standards, privacy frameworks, and risk management controls.
• Conducted security architecture reviews across cloud, network, and enterprise infrastructure environments.
• Implemented SIEM optimization, detection engineering improvements, and MITRE ATT&CK; aligned monitoring use cases.
• Performed enterprise security assessments and governance advisory engagements.

Senior Technical Lead – Security, Compliance & Governance at Mobileum Technologies (2017-05 – 2021-09)

• Managed enterprise security monitoring, compliance governance, and risk management initiatives across global telecom environments.
• Conducted threat modeling, attack surface analysis, privacy risk assessments, and governance reviews.
• Supported cloud security governance, vulnerability remediation governance, and enterprise monitoring frameworks.
• Collaborated with global stakeholders on compliance initiatives, security incidents, and governance reporting.

Senior Engineer – IT Risk, Security Monitoring & Governance at Ericsson Global India (2012-01 – 2017-05)

• Validated ISO 27001 security controls and supported internal/external audit remediation programs.
• Performed security monitoring, incident response coordination, and enterprise governance reporting.
• Supported enterprise IT risk governance and compliance assurance activities.

Engineer – IT Security & Controls at Sasken Communications (2010-03 – 2012-01)

• Conducted IT governance reviews, access control assessments, and operational risk reviews.
• Supported infrastructure security governance and compliance activities.

IT Consultant at Vodafone (via Mafoi) (2008-09 – 2010-03)

• Supported IT control mapping, access management governance, and compliance reporting activities.

PGDBM in IT & Systems – NMIMS, Mumbai

Bachelor of Engineering in Electronics & Control – Sathyabama University, Chennai