About the IAPP

Nikhil Sarnot is Managing Director (Principal / Partner) with two decades of management consulting experience working with Fortune 500 clients across US, Europe & India. Focusing on building Mega Accounts for Accenture Security in Communications, Media & Technology industry. Previously, he was the Global lead for Managed Cyber Risk, and North America Co-lead for Strategy & Risk.

Key areas of focus are building large information security and privacy programs from the ground-up. Advising clients entering new markets & transforming operations impacted by data localization, cyber laws & privacy regulations, such as GDPR, China CSL. Driving integrated risk management through technology integration & alignment of security programs with leading practices, standards, including ISO27001, NIST 800:53, NIST CSF, PCI DSS, GDPR, CCPA, CSL, HIPAA and GDPR & CCPA program implementation, with a focus on Privacy GRC; intersection of privacy law, privacy engineering/operations & privacy compliance and enabling ‘frictionless privacy’, transition to ‘business as usual’.

Driving ‘Compliance as a Service’ for clients. Leading fully outsourced risk & compliance programs, including security & privacy risk assessments, technical assessments, third-party assessments, privacy operations covering data subject access requests, data protection impact assessments, privacy impact assessments, data mapping.

Establishing cyber strategy & implementation roadmap aligned to risk, business value & performance. Elevating the cyber & privacy topic at the Board level through better risk oversight, operating model and risk reporting.

Developing target operating model & governance structure to align strategic efforts & planning across multiple functions - enterprise security, product security and privacy.

Supporting clients through their mergers & acquisition, divestiture journey including due-diligence, day 1 planning (NewCo), post-merger integration, security culture transformation.

Driving managed security services for clients, including 24X7 SOC, security tools operations, vulnerability management, penetration testing, threat intelligence, incident response & forensics, risk & compliance.

Nikhil has a MS in Computer Science from University of Southern California and currently holds a CIPT certification.