Sachin Madhavan

CEO

Bengaluru, Karnataka, India20 yrs 8 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Extensive experience in Information Security Management.
Proficient in leading complex projects and programs.
Strong acumen for aligning IT with business requirements.

Stackforce AI infers this person is a seasoned Information Security Manager with expertise in governance and risk management.

Contact

Skills

Core Skills

Security OperationsIncident ResponseThreat HuntingUse Case DevelopmentPacket Capture ToolGrc

Other Skills

Anti-phishingCISACISSPCyber Kill ChainITILNetwork SecurityPacket analysisVulnerability ManagementVulnerability Scanning

About

• A technically equipped professional with extensive experience in driving development, implementation and supporting governance framework. • Exceptionally well organised with a defined track record in completing global rollout activities, heading complex migrations and programs • Extensive experience in Information Security Management with sound exposure in achieving operational effectiveness of IT and Networking related functions and conducting security audits • Adept in leading and large task forces, heading complex projects/ programs and ensuring their timely completion • Catered esteemed clients from varied domains including telecom, banking and health insurance sectors • As astute business leader with a strong acumen for aligning IT Technology with the business requirements • A resourceful People Manager with distinguished abilities in leading people with unique motivational abilities Functional Skills - Security Operations (SOC, Incident Response, Vulnerability Management) - IT Security & Audit - Infrastructure Management - Network Security - Migration/ Transition - End-User Training - Risk Assessment - BCP - Recruitment Frameworks/Regulations - ISO27001, COBIT, ITIL, SOX Tools/Process - SIEM , Log analysis (Proxy, DNS, Firewall, Authentication, Endpoint/Windows events), IDS, DLP, Host based analysis, Packet Analysis, Netwitness , Malware Analysis, Vulnerability Management Certifications: SANS GCIH, GSEC, GCIA, GMON, CISA, CISSP, ITIL, Qualys Ceritified Specialist, Archer Certified Professional

Experience

Morgan stanley

CIRT Manager, Technology and Operations Risk

Jul 2020 – Present · 5 yrs 8 mos · Bengaluru, Karnataka, India

Managing the SOC that monitors the network 15/7 (Asia coverage) for any intrusions to the network
Providing guidance for alerts and various incidents (DDOS, Malware, Brute Force, Phishing, Unauthorised access, Data Leakage, Malicious Domains) affecting MS
Leading the SOAR incident layout and metrics development

Security OperationsIncident ResponseVulnerability ManagementNetwork Security

Private

SOC Manager

Jul 2019 – Jul 2020 · 1 yr · Sultanate of Oman

Creating and Monitoring Use Cases for Network and Endpoint alerts and creating alerts for them
Mapping the Use Cases with best practices and frameworks like MITRE ATT&CK and Cyber Kill Chain
Developing Threat Hunting Use Cases (APT, CnC, Lateral Movement, Data Leakage, Insider Threat, Basic Security Posture) for clients

Threat HuntingUse Case DevelopmentCyber Kill Chain

Morgan stanley india

SOC Manager, Technology Risk

Sep 2014 – Jun 2019 · 4 yrs 9 mos · Bangalore

Managing the SOC that monitors the network 15/7 (Asia coverage) for any intrusions to the network
Analysing the alerts generated by the SIEM tool and investigating various incidents (DDOS, Malware, Brute Force, Phishing, Unauthorised access, Data Leakage, Malicious Domains) affecting MS

Security OperationsIncident ResponseVulnerability Management

Goldman sachs india

Infosec Manager

Mar 2008 – Aug 2014 · 6 yrs 5 mos

Successfully spearheaded global rollout activities of a Packet Capture Tool on all external perimeters
Proficiently handled GRC phase in migrations program where controls were adopted, reviewed and entered into e-GRC tool in accordance with ISO 27001 and COBIT
Efficiently transitioned and executed information security functions from NY, LDN and Asia to Bangalore which included content filtering, firewall change management, IDS investigations, vendor audits, privilege management, vulnerability scanning, penetration testing

Packet Capture ToolGRCVulnerability Scanning