YedhuKrishna Menon

285 , LIG Flats , Hastsal, Vikas Puri, New Delhi-110018.

E-mail: menonyk@gmail.com (M): +91-97111 89900
***********************************************************************************************
Career Headline: Risk Management Professional with 88 months (approx. 7.3 years) of hands-on
experience in ISO 27001 ISMS & ISO 17020 Lead Audits, Business Continuity Management, Compliance
and Security Management, Vulnerability Assessment and Penetration Testing, BGC, Integrity Analysis,
Project & Quality Management, PGMM Training, Business Intelligence & Data Analytics, Supp ly Chain
Management, Pricing Analysis, Team Mentoring, Dashboard Creations & Workflow Automations,
Kaizens, Recruitments, Pre-Sales Consulting, Website Development, Social Entrepreneurship, Women
& Child Safety and Empowerment Campaigns, Corporate Social Responsibility Management and who
believes in Security Evangelism.
Certifications:
• Certified Data Center Professional (CDCP) from GAQM (2016)
• Certified Payment Card Industry Security Implementer (CPISI) from SISA (2016)
• ITIL v3 Foundation Certification from PeopleCert, UK [2015]
• ISO 22301:2012 Lead Auditor Certification from BSI, Delhi (IRCA Certified) [2015]
• ISO 27001:2013 Lead Auditor Certification from MacLead (QSA & NABET), Noida [2013]
• Certified Information Security Expert from Innobuzz, Delhi [2013]
• Lean Six Sigma Yellow Belt Certification, HCL Corporate Quality, HCL Noida [2013]
• Certified Integrity Analyst from GE, Canada [2013]
• Certified Electronics Circuit Designer, SAGA Spacetronics, Delhi [2009]

AIESEC Experience :( www.aiesec.org)

Under the umbrella of AIESEC in Cote D’Ivoire (West Africa)

 Worked with Groupe ESIG International Abidjan-Plateau, in the department of cryptography and
Network Security, conducted 103 Seminars on Information Security Management to a crowd which
included resources form CISCO, Interpol, AT & T, MTN, Orange, ESIG & Ivorian Telecom.
 Worked with COVAC International for the business & technical development of the organization.

JCI Experience (Junior Chamber International- www.jci.org)

Under the umbrella of JCI, represented India in the “Congress of Cultural Exchange-2009” at Abidjan-
Plateau, Cote D’Ivoire (West Africa).
Founder at Helping Brainz (www.HelpingBrainz.org) A weekend volunteer group which potentially
works for women and child empowerment, international peace, elderly care and community
development. Helping Brainz encourages to use your s kills (knowledge sharing) for community
development. Helping Brainz is recognized by UNESCO, and is currently empowering people from 6
cities of India, with 500+ volunteers, 38 practice leaders and 10 panel members. Helping Brainz
completed 94 community development projects as of Dec’16.
Currently Employed: KPMG India
06/2017 – Till date: Consultant – IT Advisory
Working as a Consultant - Third Party Vendor Risk Management, for a Fortune 500 Client.
Responsibilities include:
• Reviewing third party audit reports, security documentations, policies and best practices.
• Conducting IT control review covering areas of Access Management, Change Management,
Incident Management, Backup and Restoration Management, Data Center, Operating Systems,
& Network Security.
• Reviewing Business Continuity and Disaster Recovery Plan for a US based banking client. This
engagement has included understanding the technical infrastructure and existing BCP;
Conducting Threat Assessment ; Reviewing the Business Impact Analysis, and Risk Assessment
approach and methodology; Assessing the existing Recovery strategy, and crisis management
plan; and Reviewing the DR Testing plans
• Conducting gap assessment and Developing Information Security framework in accordance
with ISO 27001:2013 for IT and Banking clients across India and US.
• Conducting specific look-ups activities and vendor financial health reviews , reporting and
dashboard management.

08/2016 – 06/2017: Assistant Manager – Risk Management (Risk as a Service) at FIS Global India Pvt
Limited, Gurgaon
• Worked as an Assistant Manager in the FIS Risk Management's RaaS Team (An Innovative SaaS
Risk Management platform), which potentially helps our customers (who are financial
corporations from United States, Canada and Latin American regions) in the process of end-to-
end Third Party Vendor Risk Management, Vulnerability Assessments & Penetration Testing.
• Led and established the pilot team of RaaS in India; - Being a part and leading the team from
Asia for global discussions on the research and development of ‘in -house risk management
(GRC) tools’ and ‘new concepts, best practices and standards in third party vendor risk
assessments’.
• Information Security Awareness Training (PGMM Trainings); - Leading (conceptualizing) the
learning and skill development team;

07/2014 – 07/2016: Senior Security Specialist – Compliance and Security Team, Corporate Security at
Ameriprise Financials India Pvt Limited, Gurgaon

Senior Security Specialist handling various aspects of Corporate, Physical, Infrastructure, Vendor and
Data Security at Ameriprise Financials (A Fortune 300 Company). Responsibilities include:
 Conduct: Internal IT Audits, Physical and Infrastructure Security Audits, Datacenter and Physical
Site Audits, Background Checks, Business Continuity Review and Assessments (DR Site
Management), Audits for Executive Protection. Coordinating with National and International Risk
Advisory Councils, Vendor audits :Vendor Risk Analysis, Risk & Vulnerability Assessments;
 Audit vendors based on ISO 27001:2013, SSAE16 (SOC1, SOC2), ISAE 3402, ISAE 3000, PCI DSS
reports and CSAE 3416; Interact with Ameriprise Line of Business partners & external vendors in
all aspects of the process;
 Part of InfoSec Training team which delivers the compliance and security training for the resources
bound to a project. Initiating, facilitating, and promoting activities to foster information security
awareness within the organization;
 Creating SoPs, Polices and Documentations. Conducting Risk Roundtables, Mapping & Creating
Audit Action plans, Reporting & Dashboard Creations, Archer Records Management;
07/2012 – 07/2014 : Analyst [Project Management and Internal Auditing] at HCL
Technologies Limited, Noida-SEZ-126 (Role: Information Technology Auditor)

Being Part of the compliance and security team my responsibility includes:-

 Responsible for the continuous improvement , creation, maintenance, updation and review of
security documentations like organization's Information Security Policies policy(s), procedure(s),
guideline(s), RAG reports and Dashboards for the Compliance and Security Team, in consultation
with various functional heads, thus monitoring compliance among employees, project leads,
alliance, vendors and other third parties, and referring problems/troubleshooting
measures/reports to the appropriate Project-Leads ,Concerned Business heads, Compliance and
Security Council and to the Management.
 Responsible for asset management and maintaining the security policies according to the ISO 27001
standards, analyzing the reports of SSAE 16 and performing Security Risk Assessment of security
policies, thereby ensuring compliance using security best practices and timely Internal Security
Audits. And updating the status of assessments in daily tracker,
 Assisting the BCP leader in preparing the Disaster Recovery & IT Service continuity plans(BCPM),
 Being a responsible participant in : –
o Spot Audits, Business Impact Analysis, SWOT Analysis, Gap Analysis ,Root Cause Analysis
and Brainstorming Sessions,
 Part of Information Security Training team which delivers the compliance and security training for
the resources bound to a project. Initiating, facilitating, and promoting activities to foster
information security awareness within the organization (part of the InfoSec team)

Additional Responsibilities:

 Campus-Leader:-Learning and Skill Development Tram (*nominated as the best training

facilitator in Celebrating Excellence’13), Facilitated more than 15 technical and motivational
trainings (Kaizen and Innovations trainings),
 Instrumental in Managing the Web Content Management (Compliance) at HCL for specified
clients and facilitated the recruitment of engineering graduates in 2013/2012.

Key Achievements at HCL:

 Recipient of 8 Gemba Kaizen – Quality Improvement & HCL Scholar Certifications
 Trained in Concepts of Six Sigma, Pricing Analysis & Quote Preparations, Order Management
& Fulfillment, Kaizen Innovations, Risk Management, PGMM, Six Sigma and Supply Chain
Management & Logistics.
 Elected member of CSR Council-HCL, Initiator of the “Concept of Knowledge Transfer &
Sharing ” at CSR Council

01/2012 – 07/2012 : Analyst – Auditing [Integrity Analysis – PIMS Team] at HCL

Technologies Ltd, Noida-SEZ-126
 Auditing Analyst in the Global Inspection Analysis Team (Business Intelligence and Data
Analytics), which supports the Global Engineering, Auditing and Integrity Analysis Operations
for an Oil and Gas Conglomerate. (Auditing in accordance with IS0:17020 standards and
PHMSA, NEB guidelines).
  Analyzing and interpreting inline inspection data for two different pigging technology tools,
which are primarily used for gas and liquid medium pipelines , and assessing the integrity of
pipelines (coating quality, welding faults, mechanical damage and environmental
surroundings).
 Gap Analysis, CD-Pixel-Graphical Analysis, R&A, SOP Management, KB Creations and
Management, Dashboard Creations, Report Making, RCA, Quality-Peer Checks and Team
Mentoring (Training new resources).
 Involved in the pre-sales consulting of 3 Oil and Gas Projects for HCL
 Engaged in Presales Consulting solutions & strategies for Electronics, Healthcare,
Manufacturing, Oil and Gas industries in the areas of SCM, CRM, Customer Service, Contact
Center, e-commerce, analytics etc.
 Responsible in helping the team in executing next generation business process consulting
projects, managing proposals, building industry solutions, capabilities development and
enrichment, new service offerings, transitioning, road shows and sales support.
 Initiated an idea of Peer Management System along with the Lead Analyst, to quality check the
entire integrity analysis operations (which got widely appreciated).

02/2011 – 01/2011 : Analyst [Pricing - Global Channel Services Team] at HCL

Technologies Ltd, Chennai
The client is a fortune 100 player with its highly innovative product portfolio and business.
 Effective Management of Client’s Pricing Database, end to end Request for Quotation (RFQ)
process, Establish contacts, prepare Quotes and send RFQ’s.
 Follow-up on RFQ response and render support when necessary to facilitate favorable returns
and validate sales quotations for accuracy and profitability.
 Analysis response data to determine next course of action.
 Provide regular and ad hoc pricing analysis (on methods to optimize price through market and
pricing strategies) and reporting for management.
 Ensure compliance with government contracting regulations.
 Monitor and update commercial price lists and GCS pricelists as needed.
 Establish a system of documentation, communication and review of internal and external
comparative price data, including wins and losses due to price
 Monitor, analyze, and report on monthly Price Realization (erosion) versus budget commitmen t
on specific SPAs, quotes, market segments and/or customers.
 Perform monthly analysis of existing transactional level data to identify price/margin erosion.
 Independently develop new Excel models, charts and graphs, and procedures as necessary and
Analyze market dynamics, pricing trends, market opportunities, operating and sales margins in
order to develop reports, procedures and tools for pricing and quoting.
 Take initiative in identifying and resolving issues around pricing and margin.
 Training new resources in this Line of Business.

07/2010 – 02/2011: Supply Chain Analyst at HCL Technologies Ltd, Chennai

The client is a fortune 100 player with its highly innovative product portfolio and business.
 Engaged with Order Management/Fulfillment (LOB) with supply chain vertical (Hi -tech &
Manufacturing) in KPO space, Exposure and expertise in PO to SO conversion of orders.
 Handled and accomplished an end to end chain of activities related to supply chain
environment, perform data analysis and customer database maintenance.
Internship Trainings:
 Trained In WiMAX Technology & Radio Installations from RGV TELECOMS, NOIDA (6
weeks summer training).(Included installation of antennas at Hotel Ashoka- Samrat, Delhi)
 At SAGA SPACTRONICS, RESEARCH AND DEVELOPMENT LAB -Trained In: Electronic
Circuit Designing [PCB Designing, with platform software-PI, single or double hand made
PCBs], Designing of SMPS-(with PI Expert), Designing of Hobby Electronics Circuits, RF
Circuits & VCO’s, Surface mound devices /Tech. (SMD/T) & concerned practical works,
Transmitting & Receiver Technique.

Technical, Computer and Software Skills:

Action/Technology Tools
CMT,MPDB,LOQS, SCORP,COMS,IOMS &
CSMS, IBM Mainframe, Citrix, Webex, Team-
Order Engagement viewer , Lotus Notes
Pricing Quote Management LOQS
Database Updations MyWorkshop, PDM
Hoovers, Manta, Jigsaw, Yellow pages,
Online Market Analysis LinkedIn, Investing.business.com
Workflow tools Audits and Inspection Analysis Archer, Opera, EMAT, USCD, MFL
Programming Languages C,C++, Matlab, Basics of Scripting
Database Languages Excel, SAS (Basics), SQL(Basics)
Development-Language HTML, CSS, Flash

Web Developmen t- Blogspot, WordPress, Wetpaint, Google Sites,

Softwares Platforms/Technologies Google Intranet, Webmasters, Alexa, Whois
Operating
Systems Windows XP, 7,8, Vista

Technical Projects:
 Worked on “Thermal Image zooming” using Matlab.
 Worked on “Controlled Voltage Regulation” at SAGA SPACTRONICS-New Delhi.
 Project on Transmission and Reception of Audio Signals using Laser Lights.
 Small projects on LED lights such as Flashers, Chasers bulbs etc….
Scholastic:
YEAR COURSE INSTITUTE SCORE
School of Management Studies,
2017 Master of Business Administration Pursuing
I.G.N.O.U
Post Graduate Diploma in
2016 Annamalai University, Chidambaram Pursuing
Criminology and Forensic Sciences
B.Tech in Electronics & S.K.I.E.T, Kurukshetra
2010 63%
Communications Engineering. (Kurukshetra University, Kurukshetra)

2006 12 th -C.B.S.E. Kerala school, Vikas Puri 69%

2004 10 th -C.B.S.E. Kerala school, Vikas Puri 76%

Areas of Interest:
 Risk Management, Project Management, Business Management, Auditing,
 Information Security, Communication Engineering and Cryptography,
 Optics and its applications, Cartography and Organic chemistry,
 Presales Consulting, Multi-Level Marketing & International Trade Relations,
 Current World Affairs, Nation Development Activities, Social Entrepreneurship and last but not the
least, Organizational research and development.

Additional Professional (Educational) Courses:

 Certification in Information Security Management System from Innobuzz Knowledge Solutions,
o Course Covered: -Incident handling and Response Management, Vulnerability Assessment
and Penetration Testing (VAPT), Tools based analysis [Wireshark, VMWare (BackTrack5),
Nmap, Cain & Abel, KFSensors, Nessus, Qualyz, Securitykiss, Maltego and Netcut), &
Steganography and Cryptography.
 50 days NIIT SWIFT crash course in C++ and Microsoft Office, from NIIT.
 30 days crash course in Electronics & Telecommunications, advanced applications and PCB
Designing from SAGA SPACTRONICS, under the guidance of Mr.K.P.S. RAJ. Worked on
Softwares like Xilinx (v10.1), MATLAB (DSP & Basics), PI Expert, Xpress PCB.
 Higher Diploma in language training and personality development from Government of Kerala.

Awards and Recognitions:

 Attended ET Young India Leader’s Workshop for nextgen leaders [2017].
 Nominated and Selected by UNESCO’s MIL Team for a 3 days workshop on Media and Information
Literacy at Punjabi University, Patiala [2016].
 Community Impact Award from Ameriprise Financials Inc (US) [2016]
 Ammy Award – Distinguished Employee (Dec’14) at Ameriprise India [2014]
 Distinguished Employee Award at HCL ( O infinity League '12 and '13) [2014]
 Philip Crosby Platinum Award in CE'13 for Case study on Zero Defect Delivery in Pipeline Integrity
Analysis. [2013]
 Leon Festinger's Dashboard Excellence Platinum Award in CE'13 for Best Dashboard[2013]
 Gemba Kaizen Platinum Award in CE'13 for Best Dashboard[2013]
 Masaakai Emai Platinum Award in CE'13 for Best Dashboard[2013]
 Corporate Quality Quiz Silver Award in CE'13 [2013]
 Best Gemba Kaizen Award for Brilliant Idea -2012 among 15000 Participants / 4000 Certified
Kaizens) [2013]
 First Prize - Corporate Quiz (Business Quiz) [2013]
 HCL STAR Employee of the Quarter – OND’ 12 [2012]
 HCL Radio Award [Oct-2012], [2012]
 Represented EduNeTZ in the "National Conference on Social Media Engineering-2011" [2011]
 HCL-Community Service Council Member [2011-2012]
 Represented EduNeTZ in “Entrepreneurship-Conference” at Indian School of Business, Hyderabad
, in a meet conducted by Ashoka and Lemelson foundation [2010]
 Represented India in Intl Cultural Congress at Abidjan, Ivory Coast @ JCI International [2009]
 Best Play Award (Street play) at National level @NIT Kurukshetra and Intra-College Level [2008]
 1st prize in State level quiz competition conducted by Govt. Of Kerala (2007)
 Participated & awarded as one of the “top 7 companies” at the National level B-Plan competition
held @NIT Kurukshetra (2008).
 Led the 8 member team which investigated on "Pesticides/Cleanliness in Coca Cola" @Coca Cola -
Gangyal plant, J&K [2007]
 Runner-up in National Level Dramatics Competition in @IIT-Roorkee (2007)
 Prizes in Gandhi quiz & Eco-quiz by Delhi Govt. (2001), Received several awards in skits, dramas,
debates, quizzes, recitations, science exhibitions, fancy dress and mimes at School & State Level.
 Represented Kerala School, SKIET, FIS, HCL, Vingeo Club in various Soccer tournaments.
Hobbies and creative pursuits:
 Social Development , Website Development & Blogging,
 Playing Football & Chess, Traveling, Poetry, Drama, Quizzing & Photography.
 Listening to Musical compositions of A.R.Rehman, Vidyasagar & Rihanna.

Organizational:
 Key Team Player in the establishment of IEEE Chapter in SKIET Kurukshetra.
 Former Senior Student Executive of ISTE-SKIET Chapter, Chief of NAM’s youth Federation,
New Delhi for consecutive three years, worked as Marketing –Consultant (Campus) with
SparxGlobal.Com [2010] and Saga Spacetronics [2009], New Delhi.
 Worked as a Volunteer with National Service Scheme, Greenpeace India, AIESEC and ASHOKA
& Lemelson Foundation [as a volunteer worked for TECH4SOCIETY event at ISB, Hyderabad.
 Founder of EduNeTZ, Helping Brainz, s2J360, SDC [All Online freelancing social entrepreneurship
organization for students and the needy] & ASRAYA NGO Regd. Under the Govt. of Ivory Coast
 Founder and Former Chief of SDC (Student Development Cell, S.K.I.E.T.).
(A Society dedicated to student development) Under my leadership, SDC-SKIET:
 Acted as the Chief student coordinator for Fusion-10 & Krotaux-10(www.krotaux10.com ) also
Conducted & supervised college fests in the year 2007, 2008 (Techno-cultural).
 Conducted & supervised
 The experimental research team, which conducted experimental research on the topic
“Pesticides in Coca-Cola”, At Gangyal, J&K.
 A National Level Conference on the topic “Personality Development and Importance of
Women Education in today’s sphere of life”.
 Seminar on “E-Governance and its social impact”, Blood Donation Camp & “7 days Yoga
and Meditation Camp” at SKIET Kurukshetra “Seminar of National Importance on
Nanotechnology”
 Many activities for the development of the “Spirit of Technical Management” for
upcoming engineers.
 Worked as Organizing Manager in 2day Technical Fest “Prayaas -09”
 Became the School representative of Eco-Club Delhi, Captained the school in Inter School
Football Competition, Sr.Member in Student Council, & Selected as the Cultural Captain.

Personal Details:

 Name : YedhuKrishna Menon

 Father’s Name
 Mother’s Name
 Date of Birth
 Nationa1ity
 Passport
 Sex :
 Marital Status
 Language Known : English, Hindi, Malayalam, Tamil, French (Basics)
 LinkedIn Page
 Website
: N Madhusudhanan Menon
: Ambika P Menon
: 4 th May 1988
: Indian
: H4823084
Male
: Unmarried
: www.linkedin.com/in/yedhukrishnamenon
: www.yedhu.in

Place : New Delhi (Yedhu Krishna Menon)

Date :