Dr. Keshav S is an Information Security and Technology Risk professional with 14+ years of experience in cybersecurity, governance, risk, and compliance (GRC). He currently serves as Manager (Associate Consultant) – Risk Management at HCLTech and has previously worked with organizations including BDO India, Capgemini, Protiviti, Network Intelligence India, British Telecom, and FIS Global. He holds several global certifications such as CISM, CISA, CEH, OSCP, and ISO 27001 Lead Auditor, and specializes in ISMS, risk management, and security governance frameworks.
Dr. Keshav Sinha
Assistant Professor
Dr. Keshav Sinha
Email Address:
keshav.sinha@ddn.upes.ac.in
About
Dr. Keshav S is an experienced Information Security and Technology Risk professional with over 14 years of experience in cybersecurity, governance, risk, and compliance (GRC). He currently serves as Manager (Associate Consultant) – Risk Management at HCLTech, where he leads and manages risk management initiatives, coordinates with cross-functional teams, and ensures effective remediation of security findings across enterprise environments.
He has extensive experience in Information Security Management Systems (ISMS), IT risk assessments, compliance management, and security governance frameworks. His work involves reviewing and strengthening IT and information security policies, processes, and controls to improve organizational security posture and regulatory compliance.
Throughout his career, Dr. Keshav has worked with several leading global organizations including BDO India, Capgemini, Protiviti, Network Intelligence India, British Telecom, and FIS Global, delivering services across GRC, VAPT, and SIEM/SOC domains.
He holds multiple globally recognized cybersecurity certifications including CISM, CISA, CEH, OSCP, ISO 27001 Lead Auditor, ITIL, and JCHNP, and is currently pursuing Artificial Intelligence Governance Professional (AIGP) certification and ISO/IEC 42001 Lead Implementer & Lead Auditor. Through his work and industry engagement, he continues to contribute to strengthening cybersecurity governance, risk management, and compliance practices across organizations.