← Back to Home

Kishore Kumar

Lead IT & Security Engineer · ISO 27001 Lead Auditor

Professional Summary

Cybersecurity leader with 8 years in IT and 5 years dedicated to information security, currently owning the cybersecurity strategy, annual IT budget and security roadmap for a software development organization in Dubai. Certified ISO 27001 Lead Auditor and Microsoft Cybersecurity Architect Expert, combining audit discipline with hands-on offensive testing. I build custom security tooling and automation so leadership gets measurable visibility into risk rather than raw scanner output.

Experience & Education

Lead IT and Security Engineer

2023 — Present

NEXSYS-ONE DMCC, Dubai

Promoted from Senior Network Administrator to lead the security function of a software company building custom ERP applications — accountable for security across cloud, network, endpoint and application layers, and for the team that delivers it.

  • Own the annual IT and security budget — forecasting, licensing negotiation and cost optimization
  • Define the yearly security roadmap, initiatives, KPIs and success metrics for the team
  • Led ISO 27001 implementation and the 2013 → 2022 upgrade; support ISO 9001 and QMS audits
  • Migrated Active Directory to Entra ID with Zero Trust endpoint hardening and conditional access
  • Built SIEM and NOC capability on Wazuh, Zabbix and Uptime Kuma for 24×7 monitoring
  • Evaluate and procure security products (PAM, DLP, SIEM) — from proof-of-concept to vendor negotiation
  • Drive awareness across Development, QA, IT, HR, Accounts, Marketing and Project Management

Cyber Security Solution Expert & System Analyst

2021 — 2023

MAST Consulting Group, Dubai

Delivered security solutions across managed-service clients — VAPT, SOC and NOC build-outs, privileged access, ITSM and ISO 27001 compliance.

  • Configured and managed FortiGate firewalls, VPNs and network segmentation policies
  • Performed vulnerability assessments and penetration testing on client networks and web applications
  • Deployed and operated client Security Operations Centres for proactive threat detection
  • Established Network Operations Centres for continuous monitoring and analysis
  • Drove ISO 27001 (2013 and 2022) compliance — risk assessments, gap analysis and awareness training
  • Implemented PAM and ITSM platforms to protect critical assets and optimize service delivery

Web Developer

2018 — 2021

Freelancing

Built 50+ WordPress sites with custom themes and plugins, optimized for performance and SEO.

  • Delivered end-to-end solutions spanning hosting, design, optimization and ongoing support
  • Improved site performance by up to 70% through caching, image optimization and database tuning
  • Hardened WordPress with firewalls, malware scanning and recurring security audits
  • Developed dynamic PHP features including galleries, forms and file upload workflows

BE Computer Science Engineering

2017 — 2021

Hindusthan Institute of Technology, India

Bachelor of Engineering in Computer Science with a focus on networking and security fundamentals. CGPA 8.1.

Certifications

  • Microsoft Cybersecurity Architect ExpertJul 2025
  • Certified Ethical Hacker (CEH v11)Apr 2021
  • ISO 27001:2022 Lead AuditorMar 2024
  • Microsoft Identity & Access AdministratorJul 2024
  • ISC2 Certified in CybersecurityJan 2023
  • CNSS Certified Network Security SpecialistAug 2020
  • ICTTF Ransomware Uncovered SpecialistMar 2023

Frameworks & Standards

ISO 27001:2022ISO 9001SOC 1SOC 2GDPRITILZero Trust

For the complete version including technical skills, selected projects and full role detail, download the PDF.