Prasannakumar G K

Contributed as a core member and investor during the foundational phase of StemUp. • Planned and executed office setup, ensuring readiness for day-one operations. • Architected, deployed, and maintained network and IT infrastructure and Physical security controls to support secure and scalable growth.

• Experienced in leveraging GRC tools (ServiceNow, OneTrust, 6Clicks) to streamline processes, monitor risks, and produce insightful reports. • Implement, and maintain a robust GRC framework, ensuring its alignment with the organization's strategic objectives. • Develop and implement comprehensive compliance policies and procedures to mitigate risks and ensure regulatory adherence. • Foster effective communication with key stakeholders, including senior management, board members, and external auditors, to promote GRC awareness and collaboration.

Manage the Core team and organize its work. Establishing and maintaining an effective documented information security management system as per ISO/ IEC 27001:2013, SOC2 standard requirements Strategic development of Information security infrastructure to meet the business needs of organizations. Working with all business units to determine possible risks and risk management processes. Business development planning and acquiring the correct technology. Ensuring that newly acquired technology complies with the IT security regulations. Planning, designing, and implementing an IT and network strategy for the company. Managing the continuous maintenance of the IT network to ensuring optimum security levels are maintained.  Ensuring that no internal breaches or misuse of data take place. Determining the cause of internal and external data breaches and instituting appropriate corrective action. Planning and conducting regular internal audits and compliance audits. Reporting to the Top Management / stake holders about the performance of ISMS, SOC and other compliances. Coordination between the management and the certifying authority.Devising, testing, and reviewing Business Continuity Planning including DR Plans, Emergency Evacuation Plans & Crisis Management Plans. Liaison with external bodies regarding Information Security Management System. - Led security division - Designed and implemented Information Security Management System (ISO 27001), SOC2, CCPA and Readiness of PCI DSS. - Designed and implemented information security processes - Conducted risk assessments and audits

Designing and hosting websites for small-scale industries. Our expertise also extends to setting up robust network infrastructure for seamless connectivity and implementing advanced physical security controls to safeguard assets and operations.