Sanat Kumar Dwivedi

Senior Manager - Infosec & Data Privacy @ Pine Labs

About

Infosec, Risk & AI GRC Leader with 10 years of experience driving enterprise security and regulatory compliance across fintech, banking, and regulated industries. Delivered 200+ security and compliance engagements across diverse environments, specializing in translating complex requirements (PCI, RBI, NPCI) into scalable, business-aligned security frameworks. Extensive experience across team management and global frameworks & standards including PCI (DSS, 3DS, SSF, PIN), ISO (ISMS, AIMS, BCMS), RBI (PPI, PA-PG, PSS, DL), NPCI, UIDAI, AEPS, SOC 1/2/3, and ITGC/ITAC controls. Currently leading key Information Security initiatives at a leading fintech organization, partnering with C-Suite stakeholders to strengthen risk posture and embed security into core business operations.

Country

India

City

Noida

Industry

Computer & Network Security

Skill

AI GRC, ISO AIMS, RBI PAPG, RBI PPI, RBI PSS, PCI PIN, PCI SSF, PCI 3DS, AI Security & Governance, Cryptography, Payment Card Industry Data Security Standard (PCI DSS), System and Network Audit, Cybersecurity, Android Development, SQL, Microsoft Excel, Android Studio, Software Functional Testing (Manual), Information Security Management, Risk Assessment

Experience

Senior Manager - Infosec & Data Privacy

Pine Labs

2023-12 - Present · 2 yrs 10 mos

Bengaluru, Karnataka, India

Consultant (InfoSec Risk & Compliance)

Panacea Infosec

2023-4 - 2023-11 · 8 mos

New Delhi, Delhi, India

Leading and managing the team of 5-6 skilled consultants Incorporating new audit practices as per latest technologies introduced in industry Involved in strategic growth maintenance by client retention and quality delivery Leading PCI, RBI, HIPAA, SAMA, QCB, NIST and other regulatory audits Providing expert advisory on Risk Assessment, GRC and Data Privacy Impact Analysis

Sr. Assoc. Consultant (InfoSec Risk and Compliance)

Panacea Infosec

2021-4 - 2023-3 · 2 yrs

New Delhi, Delhi, India

* Leading and managing the team of 5-6 skilled consultants * Conducting final audit as per various standards such as PCI DSS, RBI Acts and regulations, * Conducting final readiness assessment for organizations as per HIPAA, GDPR or other Cyber Security Frameworks. * Preparing Final Audit Reports and publishing it to Audit Representatives such as CISO/CIO/CTO or other higher management personnel.

Associate Consultant (InfoSec Risk and Compliance)

Panacea Infosec

2018-1 - 2021-4 · 3 yrs 4 mos

New Delhi Area, India

* Involved in Gap Assessment of Bank, BPOs, e-Commerce, IT Companies, business associates, services providers and various merchants. * Involved in PCI DSS Level -1 certification of Banks, BPO, Payment Gateways, Payment Aggregators, National Financial Switch and various merchants and IT service providers * Involved in 80+ PCI DSS Compliance for Level-2 Travel Management Companies (TMC) associated with IATA * Involved in assessment of RBI SAR, HIPAA Readiness Assessment, GDPR Readiness Assessment, AEPS (Aadhaar Enabled Payment Systems) and ISMS 27001 * Information Security policy/procedure upgradation as per the latest security benchmarks * Configuration review and system audit as per the given benchmarks. * Gap Analysis on the basis of PCI DSS, ISMS 27001. * Conducting Network Audit, System Audit and Application/DB Tier Audit * Physical security review. * Process Audit for Human Resource, Finance, BPO/KPO etc. * Conducting risk assessment and risk treatment activity

Trainee Associate Consultant (InfoSec Risk and Compliance)

Panacea Infosec

2017-7 - 2017-12 · 6 mos

New Delhi Area, India

* Information Security policy/procedure design, analysis and review * Gap Assessment report preparation for PCI DSS, ISMS 27001, HIPAA, AEPS * Preparation of detailed reports for the various internal/external audits. * Evidence collection and review as per the various compliance benchmarks * Tracking and reviewing the project progress chart of compliance for various service providers, merchants, business associates etc.