Mar 2017 – Mar 2020 · 3 yrs · Mumbai, Maharashtra, India

• Key Focus: Information Security Strategy ~ Governance ~ Compliance ~ Architecture ~ Risk Management ~ Awareness (employees, customers & 3rd party vendor sites) ~ SOC Functions
• As a CISO, I am involved in serving as the process owner of all assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employees and business information in compliance with the organization’s information security policies. I am managing an Information & Cybersecurity risk for the Bank & its group of companies and establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.
• Some of my noteworthy milestones include:
• Lead the development of IT security strategy and implementation roadmap, and ensure its integration with the overall IT and Enterprise strategic plans; provide Information & Cyber Security related updates to board, executive management, Regulators, Internal & external auditors.
• Work closely with the legal, compliance and risk management offices to understand requirements to enable the company to adopt new digital transformational technologies,
• Provide Information security awareness framework covering employees, 3rd party vendors & customers.

Mar 2017 – Mar 2017 · 0 mo · Mumbai, Maharashtra, India

May 2011 – Feb 2017 · 5 yrs 9 mos

• As Head of IT Security, I was responsible to design information security, protection, and management framework, guidelines and best practices for the organization. My day to day activities involved forum discussion to establish the information security goals and to develop appropriate cybersecurity risk assessment and risk acceptance, monitoring the security policies, standards, and procedures in line with the organization's cybersecurity directions along with the team.
• Some of my noteworthy milestones include:
• Essayed a stellar role handling 4 global information/Cybersecurity functions (Risk assessment, Threat & vulnerability management, Penetration testing & Security control monitoring).
• Held multifaceted responsibilities like information security review of regional IT Infrastructure projects, governance of Information risk management board for the bank in the region & presenting Cybersecurity KRI’s and risk Assessment for 3rd party IT Vendors operating from India & Asia.
• Played a vital role in security auditing, providing solutions for security loopholes, designing security policy and implementing security solutions.

Mar 2007 – Apr 2011 · 4 yrs 1 mo · Mumbai Area, India

• As a VP, I have been instrumental in handling Information security review of regional IT Infrastructure projects, strategizing information security initiatives in the region to minimize the risk of Cyber-attacks, conducting Information Security awareness sessions for Nomura staff & ODC employees, Application risk assessment of critical applications and managing Global Information Security & Risk teams from India.
• Some of my noteworthy milestones include:
• Served an integral role in building the information security organization in Nomura India from scratch after Lehman bankruptcy including Global SOC in India.
• Facilitated Risk management & Assessment for 3rd party IT Vendors operating from India & Asia.
• Successfully, designed a model for vendor categorization based on risk profile. RA of vendors in China and Tokyo.

Oct 2005 – Feb 2007 · 1 yr 4 mos

• Leading a team of Information Security Architecture.
• Review I.T. infrastructure projects taken by Emirates group and identify the risks involved.
• Determine project requirements and assign staff.
• Oversee and maintain liaison between all parties concerned with the project to facilitate any changes or modifications and resolution of project problems.
• Attack Synthesis and Countermeasure Tactics, Manpower multi-skilling
• Overall guidance to this team in the role of a Subject Matter Expert
• Recommendations on server hardening, Firewalls, ISA servers reverse proxies, Antispam and antivirus solutions.
• Provide Coherent and Consistent Security Architecture through defined Security Mechanism, perform Risk analysis and suggest possible risk mitigation techniques.
• Administration of Intrusion detection and prevention solutions
• Policy reviews of Employee Internet Management

Jan 1999 – Jan 2005 · 6 yrs