Vipin Kumar Sharma

6 years of experience in Information Security - GRC, TPRM, Audits, IAM and Data Privacy. Risk Management and TRPM lead for the entire Flipkart Group (Flipkart, Cleartrip, Myntra etc.). GRC lead for Cleartrip, handling end to end security (Audits, Infosec Approvals, Management reviews.).

Hands-on experience as an auditor for various industry standards like ISO 27001, ISO 42001, NIST CSF, PCI DSS, GDPR, CCPA. Managed various audits, including RBI, IRDAI audits, Risk assessments, and external audits (e.g., Bank audits for HDFC and Axis). Hands-on experience in writing Python scripts for automation and basic experience in Linux and VAPT.

Senior Security Engineer at Flipkart (2024-09 – Present)

• Head of Risk Management and Vendor Management for Flipkart Group (Cleartrip, Myntra, Ekart etc.)
• Infosec GRC lead for Cleartrip, overseeing daily Infosec approvals and managing compliance and security audits (ISO 27001:2022, NIST CSF, PCI DSS, Bank Audits- Axis). Conducted Monthly Business Reviews with the CISO and CTO.
• Led the proof-of-concept evaluation across Sprinto,Vanta, and Mitratech, then successfully managed the full migration from OneTrust to Mitratech—an AI-enabled TPRM and Risk Management platform—overseeing onboarding and setup end-to-end.
• Leading a team of 4 TPRM professionals in executing end-to-end risk assessments across a portfolio of 500+ vendors, ensuring consistent application of due diligence standards and risk frameworks.
• IAM (Identity and Access Management) Infosec Lead: Spearheaded User Access Reviews (UAR) and overall IAM security initiatives.Increased UAR turnaround from 17% to 58 %.
• Oversaw compliance initiatives for the Flipkart group, focusing on AI Governance, DPDPA security requirements and preparations for IPO readiness.
• Hiring and Mentorship: Serving on the hiring panel and was responsible for hiring and mentoring 5 interns during my tenure.
• Conferences: Marsh Risk Management Conference, Google Cloud security conference

Lead Security Engineer at Pine Labs (2022-10 – 2024-08)

• Assistant Manager, InfoSec Team: Manage a team of 3, overseeing Vendor Risk Management (VRM) and Data Privacy initiatives. Successfully completed VRM audits for 80 vendors within a two-year period.
• Involved in annual SOC 2, PCI DSS, and Internal Audits.
• Successfully led the firm's ISO 27001 Surveillance audit, concluding it with zero observations.
• Core team member for annual RBI security audit.
• Overseeing the ISMS policy and Security training for new joiners.

Security Analyst - II at EY GDS (2022-08 – 2022-09)

• Worked as a Security Analyst in the Data Protection, Privacy and Compliance team. Responsible for client services such as Risk Assessment, Vendor Assessment, Regulation Compliance (GDPR, CCPA, ISO 27001, PCI-DSS, NIST), Cloud Security and Python Scripting.
• Work includes creating RFP and SOW for new projects and leading client calls from team India.

B. Tech in Computer Science and Engineering – SRM University, India (2020-06)