Ankur A.

Certified Privacy Professional with Eleven years inside large regulated organisations, currently working as an outsourced privacy officer for several client companies at once. At Applied Materials I ran risk and control assessments on more than 40 projects with findings tracked through to closure and rated results reported to leadership, assessed more than 50 third parties including the data protection terms in their contracts, and connected OneTrust to Salesforce, ServiceNow and SailPoint so records, consent and access stayed in step. At KPMG I implemented OneTrust end to end for global clients across data inventory, consent, subject requests, vendor assessment and cookie compliance, and built records of processing from nothing for three large clients. OneTrust Fellow of Privacy Technology and BigID certified. CIPP/E, CIPP/A, CIPM. GDPR and UK GDPR, CCPA and CPRA, LGPD, India’s DPDPA, ISO 27701. I have my partner who handles cyber and IT risk, control testing and audit. Fifteen years across GRC, cyber risk and information security. Six years at JP Morgan Chase running ISO 27001 aligned assessments on third party applications, validating audit evidence, working directly with assessment and audit teams and driving remediation to closure, including 48 long standing application breaks cleared and Executive Director recognition for it. Five years at Aviva Investors leading risk based control assessments under the SoGP framework, maintaining issue and remediation registers in IBM iCare, and producing monthly operational management information for senior leadership. Currently designing and building policy, compliance, issue and risk management end to end in OneTrust GRC at Tryg Forsikring, having done the same on ServiceNow IRM at Advantage Solutions. CISM from ISACA plus a OneTrust IT Security Risk Management certification, with direct experience of three lines of defence models, internal and external audits, SOX audits and third party assessments.