Partha Sarathy

CEO

Ras al-Khaimah, United Arab Emirates33 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Cybersecurity and Operational Risk Management.
Proven track record in developing compliance frameworks.
Leadership experience in financial services and technology risk.

Stackforce AI infers this person is a Cybersecurity and Risk Management expert in the Fintech industry.

Contact

Skills

Core Skills

Operational Risk ManagementFraud RiskBusiness Continuity PlanningInformation SecurityIdentity ManagementCybersecurityData Privacy

Other Skills

Technology Risk ManagementPolicies & ProceduresIT Risk ManagementData Leakage PreventionSecurity Information and Event ManagementVulnerability AssessmentISO 27001Security MetricsBusiness Continuity ManagementSite Reliability EngineeringCloud Risk ManagementDigital Risk ManagementIdentity and Access Management (IAM)Information Security ComplianceInternal Control Unit

About

Life is a journey of the soul in various scenarios with different set of people in the current dress/body. When i looked back on my life, i found that most of the things that happened was beyond immagination of myself. When exploration started on the power which is beyond human comprehension, i found the interesting definition of that power : 1. That enables body mind and intellect 2. That is witness to waking, dreaming and deep state of human consciousness 3. That creates, maintains and destroys the universe Probably objective of the human soul is to drop the limitation of ego to merge into eternity

Experience

Largest bank in gcc

Group Chief information Security Officer

Apr 2017 – Present · 9 yrs · Abu dhabi

Working on international compliance from data security, data privacy, Cyber security and Business continuity management by creating an unified compliance framework

CybersecurityData PrivacyBusiness Continuity ManagementOperational Risk Management

Bank

3 roles

GCISO in leading bank in APAC

Promoted

Jan 2014 – Present · 12 yrs 3 mos

Sr. Vice President - Operational Risk, Fraud, BCP & Technology Risk

Mar 2006 – Mar 2017 · 11 yrs

I am leading the Operational Risk Team of the Bank reporting to Head of Risk. Working on the following initiatives :
o Residual Risk Based Management reporting system on IT risk having service as base with Process and Informaton asset as contributors. This to cover the security [ Confidentiality, Integrity & Availability ] & Performance Risk [ Reliability, Effeciency and Effectiveness ]
o Baselining of Standard Operating procedures of the bank covering 18 facets including bcp, quality, controls, SLA, Complaints, escalation etc..
o Fine-tuning Operational Risk Framework [ Archer as Enterprise Risk Management Tool]
o RCSA across the bank along with the business and develop KRI in consultation with all stakeholder.
o Development of Enterprise Fraud Management Framework
o Automation of the BCP / DR / Operation Risk process for deriving efficiency. [ Archer as Business Continuity Managment Tool]
o Implementation of Advance Persistent Threat Monitoring.
o Implementation of Fraud Monitoring Tool.
o BCM Certification.

Operational Risk ManagementFraud RiskBusiness Continuity PlanningTechnology Risk ManagementPolicies & Procedures

Sr. V.P - CISO

Mar 2006 – Feb 2012 · 5 yrs 11 mos

Provide independent risk review of the bank's information assets to the Business Support Director.
o Development and Implementation of Records Management for non-digital asset & Digital Document Management System
o Study, selection, Implementation, maintenance & monitoring of the following :
Identity Management solution, [ Imprevata ]
Database Auditing & Monitoring, [ IBM, Gaurdium ]
Data Leakage and prevention solution, [ Symantec Vontu ]
Security Information and Event Management, [ ArcSight ]
Vulnerability Assessment review & Patch Management review [ nessus / ncircle ]
Applicaition Scanning - [ IBM appscan ]
PKI - [ Open Trust ]
Secured Browser [ H-browser ]
Observer IT
Algosec - Monitoring of firewall
Fireye - Advance Persistent Tool
o Implementation of ISO27001 for the bank – Digital & Non- Digital across 40 locations.
o Development of unique security dashboard for senior management reporting:
o Controls: ISO domain based tracking highlighting status & practice consistency.
o Threats: Security heat-map – Highlighting general threats & specific to bank.
o Log Dashboard : For highlighting the frequency of threat on risk weight-age across information assets of the bank.
o Security Metrics : Model of security metrics in line with basel II. Focus is on residual risk rather than the inherent Risk for management reporting.