Krishna Mulbagal Somashekar

Core Expertise

Certifications

• CISM
• CCISO
• ISO/IEC 27001 Lead Auditor
• ITIL® Foundation
• IT Disaster Recovery Specialist

About Krishna

I am an IT & Cybersecurity Leader with over 25 years of experience leading enterprise IT, cybersecurity governance, risk management, compliance, cloud infrastructure, and technology operations across global organizations.

Most recently, as Head of IT at Toradex Systems India, I was responsible for enterprise IT operations and cybersecurity governance supporting teams across seven global locations. I worked closely with executive leadership to build secure, resilient, and business-aligned technology environments while effectively managing cyber and operational risks.

Throughout my career, I have successfully:

• Led the end-to-end implementation and certification of ISO/IEC 27001:2022, achieving certification with zero major findings.
• Established enterprise risk registers, conducted cyber risk assessments, and drove remediation initiatives across technology and third-party environments.
• Managed vendor risk assessments and third-party security reviews to strengthen enterprise security and compliance.
• Directed IT audits, cybersecurity governance, compliance programs, and security controls aligned with recognized industry frameworks.
• Supported cloud security, endpoint security, vulnerability management, SIEM, and enterprise security initiatives.
• Delivered security awareness programs that fostered a strong security culture across globally distributed teams.
• Partnered with executive leadership and cross-functional stakeholders to align technology, cybersecurity, and business objectives.

I believe effective cybersecurity extends beyond technology. It requires strong governance, sound risk management, and close collaboration with the business to enable innovation while protecting critical assets.

This website is my professional knowledge hub where I share practical insights on cybersecurity governance, ISO/IEC 27001, AI governance, cloud security, enterprise risk management, and IT leadership, drawing from both professional experience and continuous learning.

Insights & Articles

This section will soon feature practical articles on Cybersecurity Governance, ISO/IEC 27001, AI Governance, Cloud Security, Enterprise Risk Management, Vendor Risk Management, Business Continuity and IT Leadership.