vCISO & Cybersecurity Transformation Consultant
I help organisations strengthen cybersecurity governance, secure cloud environments, and prepare for compliance assessments through practical security leadership.
Advisory Focus
Practical, hands-on security consulting across the areas organisations most need senior guidance.
vCISO & Cybersecurity Strategy
Fractional security leadership that aligns cybersecurity programmes with business objectives. This involves defining security roadmaps, establishing governance structures, and providing board-level reporting on risk posture.
ISO 27001 & SOC 2 Readiness
Structured preparation for compliance audits, from gap analysis through evidence collection to continuous control monitoring. The goal is audit readiness that is sustained, not a one-off push.
Cloud Security & IAM Governance
Security architecture for AWS and Azure environments, including identity governance, least-privilege access controls, encryption policies, and compliance-by-design frameworks.
GRC Implementation & Evidence Workflows
Operationalising governance, risk and compliance programmes with streamlined evidence collection, continuous control monitoring, and audit-ready workflows using modern GRC platforms.
SOC & Security Operations Advisory
Guidance on building and scaling security operations centres, including SIEM deployment, threat detection and response capabilities, and proactive monitoring across hybrid environments.
Professional Background
Udaayan Sarkar is a cybersecurity transformation leader whose career spans enterprise security strategy, large-scale cloud transformations, and security-led business outcomes. His expertise covers cloud environments on AWS and Azure, identity and access management, security operations centres, governance risk and compliance, application-modernisation security, and third-party risk management.
He brings a consulting mindset shaped by partnering with business leaders to define security-driven transformation initiatives. His work has included operationalising compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, GDPR and HIPAA, building and scaling global SOC operations, and implementing SIEM and CSPM solutions for proactive monitoring. He has also explored AI-driven risk analytics and predictive insights within GRC processes as a supporting area of interest.
Education
MSc — Master Program in Data Science
IIBM Institute of Business Management, 2024
BSc — Information Technology
Manipal Academy of Higher Education, 2003
Selected Experience
Senior Advisory Consultant
Associated with RiskPro
- Provides security advisory consulting across cloud governance and AWS security, vCISO engagements, and ISO 27001 and SOC 2 advisory.
- Advises on IAM governance and security controls, DevSecOps collaboration, and NIST-aligned security practices.
- Supports clients with AWS Control Tower implementation, cloud security operations, and governance and compliance frameworks.
Head — IT Infrastructure & Cyber Security
Enthusiast Global India
- Owned end-to-end cybersecurity strategy and execution across cloud security, IAM, SOC and GRC, aligning security initiatives with enterprise transformation objectives.
- Implemented identity governance, least-privilege access, encryption, retention policies and audit logging to support GDPR compliance requirements.
- Architected a multi-cloud (AWS/Azure) security framework with compliance-by-design principles, leveraging Vanta and Sprinto to operationalise SOC 2 and ISO 27001 controls.
- Built and scaled global 24/7 SOC operations with enhanced threat detection and response capabilities.
- Implemented SIEM (Rapid7) and CSPM solutions for real-time monitoring, proactive threat detection and automated compliance reporting.
- Designed enterprise GRC programmes using Vanta and Sprinto for evidence collection, continuous control monitoring and audit workflows.
- Introduced AI-driven risk analytics and predictive insights within GRC processes.
- Strengthened third-party risk management through structured vendor security assessments, continuous monitoring and SLA-based governance.
- Managed IT and security budget ownership, delivering cost optimisation through automation (RPA), tool rationalisation and governance efficiencies.
- Built and mentored a cybersecurity team, fostering innovation, accountability and continuous capability development.
Manager (IT) & InfoSec
Global Growth India Pvt Ltd
- Led infrastructure and security transformation across global business units, acting as a trusted adviser on cloud, security and IT strategy.
- Delivered hybrid cloud transformation (AWS/Azure) with secure architecture design and operational readiness.
- Implemented HIPAA-compliant security controls for U.S. healthcare workloads (EMR/EHR), ensuring regulatory alignment and data protection.
- Designed resilient data centre and disaster-recovery solutions for U.S. regions.
- Controlled costs to keep business operating within budget.
Senior Advisor — Messaging Service
Dell International Services
- Led a team overseeing Exchange/Messaging infrastructure and IronPort security, adhering to ITIL frameworks.
- Leveraged BMC Remedy for incident and problem management, delivering on SLAs for global stakeholders.
Technical Support Lead — Wintel
Eli Research
- Led a support team designing and administering high-availability Windows Server environments and virtualisation clusters.
- Implemented standardised troubleshooting and monitoring techniques to improve resolution times.
Tools & Frameworks
Frameworks & Standards
Platforms & Tools
Certifications
Note: exact certification titles and issuing bodies are pending confirmation.
Get in Touch
If you would like to discuss your security priorities, compliance readiness or a potential advisory engagement, please use the form below.
Direct email and other contact channels will be published here once approved.