Oct 2025 – Present · 6 mos

• As Head of Information Security, I am responsible for defining and driving the organization’s security vision, strategy, and execution across the entire technology and business landscape. The scope includes:
• Infrastructure Security: Securing on-premises, hybrid, and cloud environments, ensuring resilience, redundancy, and robust defense against evolving threats.
• Perimeter & Network Security: Protecting the enterprise edge through firewalls, IDS/IPS, VPNs, Zero Trust architecture, and advanced monitoring.
• Cloud Security: Establishing governance, controls, and continuous monitoring across multi-cloud environments (IaaS, PaaS, SaaS).
• Application Security: Embedding security into SDLC, DevSecOps, VAPT, code reviews, and secure architecture practices.
• AI Security: Safeguarding AI/ML systems and LLM-based products against adversarial attacks, model/data poisoning, prompt injection, data leakage, and ensuring ethical + secure deployment of AI across the org.
• Governance, Risk & Compliance (GRC): Aligning security programs with regulatory standards (ISO 27001, SOC2, GDPR, etc.), risk assessments, and audits.
• Identity & Access Management (IAM): Enforcing least-privilege, role-based access, and strong authentication across systems and users.
• Threat Detection & Incident Response: Building SOC capabilities, SIEM monitoring, threat intelligence, and structured response plans.
• Data Security & Privacy: Protecting sensitive data at rest, in motion, and in use; ensuring privacy controls are in line with global regulations.
• Awareness & Culture: Driving org-wide security training, awareness campaigns, and building a culture where security is everyone’s responsibility.

Apr 2025 – Oct 2025 · 6 mos

Aug 2024 – Jul 2025 · 11 mos

Apr 2023 – Aug 2024 · 1 yr 4 mos

Sep 2020 – Sep 2023 · 3 yrs

Sep 2017 – Sep 2020 · 3 yrs

Jul 2016 – Dec 2017 · 1 yr 5 mos