Rajesh Mishra
About
Detail
Director - Consulting, Risk and Security | Cyber Security Risk, IT Governance Expert
North Brunswick Township, New Jersey, United States
Contact Rajesh regarding:
work
Full-time jobs
Résumé
Jobs
verified_user
0% verified
Risk ManagerScholasticJun 2025 - Current (1 year 5 months)- Oversee risk management program, assess risks, and collaborate with stakeholders to drive remediation efforts - Streamline the risk lifecycle process to maximize efficiency and ensure timely updates within the ServiceNow platform. - Track compliance related controls remediation measures- Director - Consulting, Risk and SecurityCognizantOct 2018 - Mar 2025 (6 years 6 months)• Conducted NIST CSF-aligned security assessments and developed 3–5-year roadmaps to enhance security posture, align strategies with business priorities, and ensure compliance
• Authored security policies, controls, and standards aligned with ISO, NIST, and CIS frameworks for cross-industry clients
• Developed offerings based on ISO 42001 and NIST AI RMF to evaluate clients' AI programs
• Designed advanced Technology Risk Management programs, performing comprehensive risk assessments and recommending mitigation measures
• Led vulnerability program assessments, focusing on processes, tools, automation, remediation, and KPIs
• Conducted SDLC reviews, integrating SAST, DAST, and CI/CD pipelines with scanning tools - Associate DirectorCognizantJan 2013 - Oct 2018 (5 years 10 months)• Assessed cloud security posture and cloud migration readiness for various customers.
• Optimized information security processes for global banks and healthcare providers.
• Conducted HITRUST gap assessment, managed certification readiness remediation and facilitated certification
• Managed SOC2 certification and track remediation efforts to ensure timely certification.
• Refined Third Party Risk Management programs of multiple customers to optimize and spend and effectively manage vendor risk.
• Develop security policies, standards for customers to align with industry standards
• Manage GRC tool implementation
• Oversee delivery of multiple security related engagements - Director - Business Continuity & IT ComplianceGAIN CapitalDec 2010 - Jun 2012 (1 year 7 months)• Implemented the FrontRange ITSM application, streamlining tools and processes for Incident, Problem, Change Management, Service Requests, and CMDB. This involved reviewing practices, aligning with ITIL standards, securing stakeholder approval, and training staff accordingly.
• Managed IT controls compliance, achieving no deficiencies and minimal observations during SOX, SSAE16, and other audits.
• Developed an IT control matrix and test scripts, as well as conducted internal assessments of control design and effectiveness.
• Coordinated external audits by facilitating walkthroughs, interviews, and information gathering; managed remediation planning and implementation.
• Conducted semi-annual enterprise risk reviews, id - Management ConsultantGAIN CapitalJan 2009 - Jan 2010 (1 year 1 month)• Led the development, testing, and evaluation of business continuity processes; identified single points of failure and managed remediation projects.
• Contributed to the Security Task Force in developing and implementing security policies and processes. - Manager, Security and PrivacyDeloitteOct 2005 - Oct 2008 (3 years 1 month)Managed engagements related to Information Security Audits, SOX 404 readiness and testing, evaluate control design and operating effectiveness, application control reviews, disaster recovery, business continuity, IT Risk Management, compliance with regulations, and standards. Key engagements included Risk Control Self Assessment framework development, HIPAA and PCI readiness, and ISO 17799 assessments.
- PProject ManagerSep 2000 - Sep 2005 (5 years 1 month)The key responsibilities included consulting, design and implementation of IT infrastructure for mission critical applications, project management, Information Security audits, and manage client relationships. Received ‘Outstanding Performance Award’ and was member of 'Think Tank’. Spearhead creation of ‘Consulting Practice’ division, secured and successfully executed consulting assignments. Responsible for hiring, retaining, goal setting, and performance management of the team. Acted as Information Security Officer and successfully obtained ISO17799 certification. Managed engagements related to security assessments, BCP/DR, security audits, IT strategies, and compliance audits. Managed engagement of a leading refinery company to review and
- VEDP - InchargeVidyut Metallics LimitedJul 1997 - Aug 2000 (3 years 2 months)World's second largest razor blade manufacturing organization having global presence in all continents with leading brand 'SuperMax'. Key acheivements included:
• Successfully implemented BaaN ERP and underlying IT infrastructure
• Achieved 60% reduction in cash purchases and 15% reduction in inventory holdings - ASystems OfficerAssociate Lumbers LimitedJun 1995 - Jun 1997 (2 years 1 month)
- CAnalyst ProgrammerCompAccApr 1994 - May 1995 (1 year 2 months)
Education
verified_user
0% verified
- ITM Group of Institutions — Master of Science (MS), Computer Information SystemsITM Group of InstitutionsJan 1991 - Dec 1993 (3 years)
- University of Mumbai — Bachelor of Science (B.Sc.), ChemistryUniversity of MumbaiJan 1987 - Dec 1990 (4 years)