Romharsh Razdan

He has led multiple regulatory (technology and risk regulations/circulars/advisories) assessments and advisory projects for multiple banks, IT/ITeS, Insurance and FS companies.

He has led multiple cloud security advisory projects for multiple Banks, AMC, MFs and IT companies.

He has led multiple payment system (I-Banking, SWIFT, ATM, Instant Money transfer, M-Banking, Mobile Wallets etc.) assessments/review using STRIDE Threat Model for multiple banks.

He has led 17+ projects for large banks in India for developing a cyber security strategy and framework with cyber crisis governance program covering 3rd party risk management areas based on RBI, SEBI, Cert-In, NIST Guidelines and India National Cyber Security Policy.

He has led a project in assisting the 4+ banks in review, design and establish an enterprise fraud risk management center and related processes including the latest cyber security frauds and manual frauds.

Before KPMG in India, Romharsh has worked with India’s largest public sector bank as a manager in IT department looking after vendor-related web portals including internet banking.

Areas of Expertise: 

Romharsh has deep experience in providing services in the space of Emerging Technology Security (Cloud, AI/ML, IoT, RPA), Payment Security, Cloud Security Engineering & Governance, Regulatory Compliance (Payment Regulatory Compliance and Technology), Vendor Risk Management & Governance, Tech. Regulatory Advisory/Assessments, Tech. Risk, IT Strategy and Architecture, IT System Selection, Data Centre Operations and Management, IT due diligence, IT Governance, Business Continuity, ITSM (Incident, Change, Patch, Problem Management) to a large number of organisations, which are primarily in Banking, Telcom, IT, AMC, Insurance and NBFC sector. 

Cloud Security Engineering & Governance, Regulatory Compliance (Payment Regulatory Compliance and Technology), Technology Risk, Vendor/ System Selection and Program Risk Management, Enterprise Fraud Risk Management, Cyber & Operational Resilience, IT Risk, Governance and Security, Technology Enabled Transformation and Business Continuity.