Kumar Vivek

Cybersecurity & Technology Risk Leader with 17+ years of experience designing and leading enterprise security architecture, cybersecurity governance, technology risk management, cloud security, identity and access management (IAM/PAM), third-party risk management (TPRM), SOC transformation, and regulatory compliance across retail, telecommunications, and technology organizations. Proven expertise in developing security strategies, embedding Security-by-Design principles, modernizing security operations, and strengthening enterprise cyber resilience while aligning security initiatives with business objectives. Recognized for leading security architecture reviews, threat modeling, Zero Trust initiatives, executive risk reporting, and cloud security programs aligned with NIST CSF, NIST RMF, ISO 27001, COBIT, ITGC, MITRE ATT&CK, and industry best practices.

Adept at partnering with executive leadership, business stakeholders, and technology teams to drive governance, reduce cyber risk, improve security posture, and deliver scalable, compliant, and resilient enterprise security solutions.

Assistant General Manager – IT (Security & Risk Monitoring) - AVENUE SUPERMARTS (DMART)

(2025-11)

Drive enterprise cybersecurity strategy by leading security architecture, cyber governance, technology risk, and security monitoring initiatives while partnering with business and technology leaders to enhance cyber resilience, regulatory compliance, and secure digital transformation.

• Directed enterprise security architecture, cyber governance, and technology risk initiatives, strengthening cyber resilience and enabling secure digital transformation across business operations.
• Governed Third-Party Risk Management (TPRM) by overseeing vendor security assessments and remediation, reducing third-party cyber exposure and reinforcing enterprise security controls.
• Established executive cyber risk dashboards, KRIs, and governance reporting, enabling data-driven decision-making and enhancing enterprise risk visibility for leadership.
• Integrated Security-by-Design principles and aligned controls with NIST CSF, ISO 27001, and ITGC, improving compliance and strengthening the organization's security posture.

Security Consultant – Cyber Architecture & Detection - NOKIA

(2021-09 - 2025-11)

Led enterprise cybersecurity architecture and security operations transformation by modernizing detection capabilities, strengthening threat visibility, and advancing Zero Trust initiatives across cloud, network, and endpoint environments.

• Modernized Security Operations Center (SOC) capabilities through SIEM optimization and detection engineering, enhancing threat visibility and improving security monitoring effectiveness.
• Engineered MITRE ATT&CK-aligned detection use cases, strengthening threat detection coverage and accelerating identification of advanced cyber threats.
• Evaluated enterprise security architectures across cloud, network, and endpoint environments, improving security posture through risk-based design recommendations.
• Advanced Zero Trust adoption by conducting threat modeling and security design assessments, enabling secure enterprise transformation and resilient technology architectures.

Senior Technical Lead – Security & Compliance - MOBILEUM TECHNOLOGIES

(2017-05 - 2021-09)

Led enterprise security monitoring, compliance governance, cyber risk management, and cloud security initiatives to strengthen organizational resilience, support regulatory compliance, and enhance enterprise security operations.

• Directed enterprise security monitoring, compliance governance, and executive reporting, strengthening organizational security posture and improving cyber risk visibility.
• Conducted enterprise risk assessments, threat modeling, and vulnerability governance, reducing security exposures and driving risk-based remediation across critical systems.
• Led cloud security initiatives and supported global incident response, enhancing operational resilience and reinforcing enterprise-wide security and compliance programs.

Senior Engineer – IT Risk & Security Monitoring - ERICSSON GLOBAL INDIA

(2012-01 - 2017-05)

Supported enterprise IT risk, security monitoring, and compliance initiatives by strengthening governance, enhancing incident response, and maintaining alignment with industry security standards.

• Validated ISO 27001 security controls and conducted compliance assessments, strengthening governance, supporting audit readiness, and improving regulatory compliance.
• Coordinated security monitoring, incident response, and IT risk reporting, enhancing operational visibility and enabling timely resolution of security and compliance issues.

Engineer – IT Security & Controls - SASKEN COMMUNICATIONS

(2010-03 - 2012-01)

Built foundational expertise in IT security, access governance, and infrastructure protection by supporting enterprise security operations and compliance initiatives.

• Performed access control reviews and IT governance assessments, strengthening security controls and improving compliance with organizational policies.
• Supported infrastructure security operations and compliance activities, enhancing operational security and contributing to effective enterprise risk management.

IT Consultant - VODAFONE (via Mafoi)

(2008-09 - 2010-03)

Supported enterprise IT operations, identity governance, and infrastructure services by contributing to access management, compliance, and operational efficiency.

• Supported identity and access management activities, strengthening user access governance and ensuring compliance with organizational security policies.
• Coordinated user provisioning, compliance reporting, and governance documentation, improving operational efficiency and supporting audit readiness.
• Collaborated with infrastructure teams to deliver operational support and service management, contributing to stable, secure, and reliable IT services.

Post Graduate Diploma in Business Management (PGDBM) - IT & Systems - Narsee Monjee Institute of Management Studies (NMIMS)

Bachelor of Engineering (B.E.) - Electronics & Control Engineering - Sathyabama University