Jul 2022 – Jan 2025 · 2 yrs 6 mos · Bengaluru, Karnataka, India · Hybrid

• As Senior Security Risk & Compliance Strategist at Grab, I led the automation of governance, risk, and compliance (GRC) processes for control testing and monitoring, which significantly improved efficiency.
• By implementing AI-driven frameworks, I enhanced the visibility and reporting of compliance metrics, allowing for more proactive risk management. I also managed vendor risk, policy compliance, and maintained dashboard evidence aligned with standards such as PCI DSS, SOC 2, SWIFT, and NIST.
• Working closely with auditors, I helped streamline compliance reviews and strengthen our overall security posture. Additionally, I supported product teams by integrating security controls and key risk indicators throughout the development lifecycle to ensure ongoing compliance and risk mitigation.
• Achievements:
• Automated control testing workflows that increased audit efficiency.
• Introduced data-driven compliance frameworks, enhancing operational oversight.
• Strengthened vendor management processes, reducing associated risks.
• Improved remediation tracking and risk reporting across multiple teams.

Apr 2019 – Feb 2022 · 2 yrs 10 mos · Petaling Jaya, Selangor, Malaysia

• As a Senior Information Security Engineer at Grab Malaysia, I improved data protection by leveraging DLP, CASB, and proxy tools to safeguard sensitive information effectively. I led security assessments aimed at implementing Zero Trust security models across both cloud and network environments.
• In addition, I defined governance policies to enforce security standards and support threat mitigation efforts. I also coordinated closely with cross-functional teams on vulnerability management and security incident response to ensure timely and effective handling.
• Achievements:
• Implemented Zero Trust initiatives, improving overall network security posture
• Strengthened data loss prevention mechanisms, reducing exposure to sensitive data leaks
• Enhanced security governance policies that improved response to emerging threats

Feb 2022 – May 2022 · 3 mos · Remote

• As Enterprise Security Lead at Dhani Loans, I managed enterprise security governance with a strong focus on endpoint protection and data loss prevention (DLP). I enforced identity and access management (IAM) controls, including multi-factor authentication and mobile device management, to ensure robust security across the organization.
• My work involved aligning security practices with regulatory compliance requirements and Zero Trust principles, strengthening our overall defense posture. Additionally, I developed secure mobile access policies that balanced business needs with risk minimization.
• Achievements:
• Established stronger IAM and endpoint protection controls, reducing security incidents.
• Successfully aligned security controls with RBI cybersecurity compliance standards.
• Developed and implemented mobile security policies, improving user experience and protection.

Oct 2017 – Mar 2019 · 1 yr 5 mos · Pune, Maharashtra, India

• As Lead Cyber Architecture at The Bank of New York Mellon Technology, I conducted network security architecture reviews to identify weaknesses and strengthen controls.
• I defined and enforced security standards and policies across multiple geographical locations to ensure consistent protection. Additionally, I managed risk-based control implementation using RSA Archer to maintain regulatory compliance effectively.
• Achievements:
• Developed consistent security architecture standards used across multiple sites
• Led network control assessments that reduced identified risks
• Successfully governed risk-based control projects in line with industry regulations

Sep 2015 – Sep 2017 · 2 yrs · Pune

• As a Network Security Engineer at Capgemini, I configured and maintained firewall, proxy, and router setups to secure corporate networks effectively. I also delivered customized security solutions tailored to address specific vulnerabilities and network risks.
• Achievements:
• Resolved critical network vulnerabilities through targeted security measures
• Improved firewall and proxy configurations enhancing network defense layers

Mar 2010 – Sep 2015 · 5 yrs 6 mos · Pune Area, India

• As a Network Administrator at Tech Mahindra, I maintained Cisco network devices to ensure reliability and maximize uptime. Additionally, I implemented security controls to protect production systems and minimize downtime.
• Achievements:
• Consistently maintained network availability supporting critical business functions
• Introduced security controls that reduced network-related incidents