L Lukos

Head - IT Security, Cloud Security, Privacy, Compliance, Audits, Continuity & Resilience @ MetricStream

About

♦ Information Security, Risk, Privacy, Compliance, IT Audit professional with around ~25 years of cross-functional experience in IT, including consulting experience in large organizations in Middle East ♦ CISM, CISA, CDPSE, LA' ISO 27001, FedRAMP, SOC2, HIPAA, GDPR, ISO 20000, BS 25999, ISO 9001, CCPA • GRC, Risk mgmt, Regulatory Compliance attestations, ISMS implementation & mgmt, Business Continuity & Disaster Recovery, Data Management, Data Protection, AI Product Security, Internal Audits • Cloud Security, AWS, Security Architecture, Access Mgmt (PAM), Application Security, Containers, Vulnerability mgmt., PenTest, IT Governance, Controls evaluation & remediation, IT Policies & Procedures • Privacy Mgmt, Privacy by Design, DPIA, DPA, SCCs reviews for General Counsel, Legal, Privacy Laws • Customer Contracts & Service Agreement reviews, Third Party/ Vendor Risk mgmt, Sales RFP due-diligence & support • GCC, GIC, SSC Controls and Strategies • ESG Sustainability, IT Service Management, Physical Security, Policies & Procedures development, Security Awareness, Senior Management Reporting • Business Analysis, Software Project mgmt, Software Integration & Release, Product functional • Quality Assurance, Process reviews, Product Testing, Project mgmt • Banking & Financial services, Technology, Telecom, Insurance, Oil & Gas, Airlines, Hospitality sectors ★ Interests: AI Security, ML, NLP, IoT/ ICS, Cybersecurity & (contextual) Behavioral Analytics, SECaaS, Automation,

Country

India

City

Bengaluru

Industry

Computer Software

Skill

IT Audit, Information Security, Governance, ISO 27001, Business Continuity, CISA, Risk Assessment, SDLC, Risk Management, IT Service Management, Business Analysis, Information Security Management, Integration, Information Technology, Disaster Recovery, ISO 20000, Vulnerability Assessment, Business Process Design, ERP, Quality Assurance

Experience

Head - IT Security, Cloud Security, Privacy, Compliance, Audits, Continuity & Resilience

MetricStream

2015-7 - Present · 11 yrs 3 mos

Bengaluru Area, India

¤ Information Security Governance and Ops, Data Protection, Risk Mgmt ¤ Cloud Security Engineering, AWS, Application Security, Customer Audits ¤ Compliance Audits: SOC2, HIPAA, ISO 27001, FedRAMP, GDPR, CCPA, GxP, ESG ¤ Customer & Pre-Sales RFP due-diligence assessments, Contracts DPA reviews ¤ Third Party (Supplier/ Partner) assessments, Access Mgmt., Internal Audits ¤ BCP-DR, Security Incident management, Vulnerability Mgmt. & Advisory, AI Security, Resilience, Sustainability ¤ Security Training & Awareness programs

Information Security Head

Societe Generale

2014-7 - 2015-2 · 8 mos

Bengaluru Area, India

Identity & Privileged Access mgmt, Data Leakage Protection, Security Incident mgmt, Project and Application reviews, DLP, Data Mgmt, Security Policy, End user Security awareness, Physical Security, Vendor Risk assessment, Physical Security, Risk Reporting & KRIs to senior management

AVP Global IT Risk & Controls

Deutsche Bank

2013-9 - 2014-7 · 11 mos

Bangalore

Risk & Controls for global Application Development and Production teams; Audit issues, Regulatory Engagements, Information security and Compliance activities, Business Continuity Tests etc. Application security/ Regulatory (MAS) compliance programs, Reporting and Escalation to senior management

Technology Risk & Audit Manager

Fidelity Investments

2011-1 - 2013-9 · 2 yrs 9 mos

Bangalore

Internal IT Audits, Risk Assessments and Controls adherence reviews on IT infrastructure, Data center, BCP, IT Assets mgmt, Infra projects, Vendor assessments. Compliance reviews on ISO27001, ISO20000 and corporate policies. Reporting Risk & Audit issues to management.

IT Audits, InfoSec, BCP-DR, IT Consulting, SDLC

2005-4 - 2011-1 · 5 yrs 10 mos

Riyadh, Doha, Kuwait, Dubai, Manama, Trivandrum

IT Audits, IT General & Application control reviews, Risk Assessments. Business Continuity & Disaster Recovery planning and reviews. Application Security, configuration, software licensing, data center and SDLC reviews. Implementation and maintenance of ISO27001 (ISMS). IT policies & procedures, Security metrics, Security awareness program development, IT asset reviews, Vendor assessment. Review of client proposals and reporting, project deliverables, performance etc. Implementation and Maintenance of ISO27001, ISO20000 ISO9001, Internal Audits, Security Awareness, Business Continuity, Physical Security, Security Operation Center. Business Analysis, System selection, Data Mgmt, Application integration, Review deliverables and project transition of resources. Business specifications, SRS (functional specifications), Function Point estimation, Use case development and business reports. Software estimation, User acceptance testing, Project Management. Application Training, Client presentations, User training content and Process Transition

Software Development/ QA

Cordys is now OpenText

2001-4 - 2005-4 · 4 yrs 1 mo

Hyderabad

Customer Acceptance Testing of BPM Platform and applications on various configurations & operating platforms, Quality Assurance, Product Testing processes and control System Design & development of beyond ERP products built over Cordys Business Collaborative Platform integrating Baan IV and other applications. Functional specifications. Development processes and controls. Project and Release Management.