Piyush G.

CEO

Delhi, India11 yrs 7 mos experience

Key Highlights

Over 12 years of cybersecurity leadership experience.
Expert in regulatory compliance with PCI-DSS and ISO 27001.
Proven track record in developing agile security practices.

Stackforce AI infers this person is a Cybersecurity expert with extensive experience in regulatory compliance and risk management.

Contact

ccie.piyushgupta@hotmail.com LinkedIn

Skills

Core Skills

Cyber Security RiskRegulatory ComplianceIt Security PoliciesInformation Security ManagementRisk ManagementNetwork SecurityInformation Security

Other Skills

Agile Security PracticesApplication SecurityBusiness DevelopmentBusiness Impact AnalysisBusiness StrategyCISACertified Information Security Manager (CISM)Certified Lead AuditorCheckpoint SecurityCisco ASACisco NexusCisco VPNCisco WirelessCloud SecurityCollaboration

About

As Chief Information Security Officer, the focus is on strengthening cybersecurity strategies while ensuring compliance with PCI-DSS and ISO 27001 standards. The team collaborates across departments to implement robust security frameworks, uphold regulatory compliance, and foster a culture of proactive security awareness. With over twelve years of specialized experience in cybersecurity leadership, previous contributions at MobiKwik involved developing agile security practices, managing web application firewalls, and sustaining compliance with regulatory mandates. By enabling collaboration with external auditors, processes for policy management and incident responses were enhanced, aligning security operations with organizational objectives.

Experience

Confidential company

Director - Chief Information Security Officer (CISO)

Jan 2025 – Present · 1 yr 2 mos · On-site

Developed and implemented a comprehensive cybersecurity roadmap aligned with business objectives and regulatory requirements.
Led risk management initiatives to identify, assess, and mitigate cyber and data risks, enhancing incident response and business continuity planning.
Oversaw security operations, ensuring compliance across endpoint, network, and cloud environments while driving adherence to ISO 27001 and GDPR standards.

Cybersecurity roadmapRisk managementIncident responseComplianceISO 27001GDPR+2

Mobikwik

A.Director-CyberSecurity

Apr 2021 – Jul 2022 · 1 yr 3 mos · Gurugram, Haryana, India · On-site

Developed and maintained agile Security Best Practices and calibrated various Web Application Firewalls, along with driving organization-wide Culture of Security. Developed process to sustain PCI-DSS & ISO 27001 certification and cooperated with cross-functional teams to implement PCI & ISO 27001 controls.
Ensured adherence with CERT-In, NPCI, RBI (ReBIT) and Bharat Bill Pay regulations and various other regulatory compliances and collaborated with 38 external auditors and aided them in audit, policy management & incident management.

Agile Security PracticesWeb Application FirewallsPCI-DSSISO 27001Cross-functional collaborationRegulatory compliance+2

Sbi card

Assistant Vice President - Risk Management & Vulnerability

May 2020 – Oct 2020 · 5 mos · Gurugram, Haryana, India · On-site

Spearheaded SBI Card's end-to-end program for managing security incident life-cycle, which includes Information Governance Security, Routine Investigation, Forensics eDiscovery, and many more. Monitored, responded, reported, adhered to SLAs and managed security incidents related to IT systems covered under security programs like SIEM, DLP, Anti-Phishing Brands and Dark-Web Monitoring.
Directed Incident Management program and SBIC incident response tools & processes, covering proactive planning and prevention, RBI reporting, as well as reactive detection and remediation.

Security incident managementInformation Governance SecurityForensics eDiscoverySIEMDLPIncident Management+2

Aujas

Senior Consultant

Dec 2018 – Mar 2020 · 1 yr 3 mos · Gurugram, Haryana, India · On-site

Defined and reviewed information security policies and processes and conducted Information Security Internal audits and Risk Assessments on Processes, Applications, Networks & Systems. Assessed impacts on business from cyber security, legal and regulatory perspectives.
Collaborated with Project Managers, Business Analysts, and Architecture and Support Teams to ensure adherence to Information Security and Risk management standards.

Information security policiesRisk assessmentsInternal auditsCollaborationInformation Security ManagementRisk Management

Hcl technologies

Cyber Security Specialist

Jan 2017 – Aug 2018 · 1 yr 7 mos · Noida, Uttar Pradesh, India · On-site

Served as a primary point of contact within the organization for members of staff, regulators, and any relevant public bodies on issues related to cyber security & data protection. Aligned the company's policy with the General Data Protection Regulation (GDPR) and codes of practice.

CybersecurityData protectionGDPR complianceIT Security PoliciesRegulatory Compliance

Innovative business solutions

Information Security Analyst

Jan 2011 – Dec 2016 · 5 yrs 11 mos · Noida, Uttar Pradesh, India · On-site

Information Security Analyst | Innovative Business Solution
Jan 2011 to Dec 2016 | Noida
Provided network support across a range of networking services, network audit, design, implementation and performance analysis. Focused on network design to maximise network reliability, redundancy and predictability and to provide secure networks that meet compliance regulations.

Network supportNetwork auditDesign and implementationNetwork SecurityInformation Security