Saurabh Nigam

CEO

Panvel, Maharashtra, India21 yrs 2 mos experience

Highly Stable

Key Highlights

21 years of experience in Cybersecurity leadership.
Achieved 40% reduction in security incidents.
Led transition to threat-led cybersecurity strategy.

Stackforce AI infers this person is a Cybersecurity Leader with expertise in Fintech and enterprise security strategy.

Contact

Skills

Core Skills

Security OperationsRisk ManagementThreat & Vulnerability Management

Other Skills

IT AuditInformation Security StandardsRisk AssessmentSecurity Information and Event Management (SIEM)Security Incident ManagementMITRE Attack FrameworkNISTSarbanes-Oxley ActISO 27001Incident ResponseVulnerability ManagementCost ManagementSecurity Roadmap OwnershipZero Trust ArchitectureCyber Threat Intelligence (CTI)

About

I am a seasoned Cybersecurity Leader with over 21 years of extensive experience in security operations, risk management, and enterprise security strategy across the financial services and technology sectors. My career has been dedicated to directing global security operations, where I have led diverse teams and driven initiatives to strengthen organizational resilience and cyber defense capabilities. I am passionate about transforming cybersecurity models from compliance-driven to threat-led, embedding advanced frameworks to enhance proactive defense capabilities.

Experience

21 yrs 2 mos

Total Experience

5 yrs 3 mos

Average Tenure

Current Experience

Msci inc.

2 roles

Executive Director

Promoted

Dec 2022 – Sep 2025 · 2 yrs 9 mos

Description: As the Executive Director and Head of Security Operations, I led enterprise-wide security
operations as a member of the CISO Executive Team. I was accountable for managing the Security Operations
Center (SOC), Incident Response, Vulnerability Management, and security governance across multiple global
regions with a team of 29. I directed the transition of our global cybersecurity strategy from compliance-driven
to threat-led defense, achieving an impressive 88th percentile ranking in red/purple team simulations
benchmarked against over 100 peer organizations. My leadership resulted in a 40% reduction in security
incidents through operational reviews and standardized incident response protocols, achieving 95% SLA
compliance across all sites.
Achievements: I successfully achieved $1M in annual cost savings in SIEM operations through intelligent log
piping and storage optimization while expanding monitoring coverage. I strengthened our vulnerability
management posture to maintain fewer than 10 vulnerabilities per host and ensured 95% compliance with
Zero-Day remediation timelines. Additionally, I built and executed a structured training and certification
program that enabled 60% of my team to achieve targeted certifications within one year. I served as the
primary compliance liaison for various audits, leading governance cycles with zero major audit findings.

Security OperationsThreat & Vulnerability ManagementIT AuditInformation Security StandardsRisk AssessmentSecurity Information and Event Management (SIEM)+6

Vice President

Nov 2016 – Dec 2022 · 6 yrs 1 mo

Vice president @MSCI

Security OperationsThreat & Vulnerability ManagementIT AuditRisk AssessmentSecurity Information and Event Management (SIEM)Security Incident Management+1

Paladion networks

4 roles

Delivery Manager-Captive SOC Services at Paladion Networks

Promoted

Jun 2015 – Oct 2016 · 1 yr 4 mos

Build & Maintain Delivery Team strength in line with Revenue Plans (Segregated by Service Lines, appropriate Bench and Cross Trainings).
Train & Develop Delivery Team members on Practices, OEM solutions and other Services.
Performance Management & Career Planning (Role Inventory) of the Delivery Team.
Team Management – Motivation, Leadership Development, conflict resolution.
Resource allocation for ongoing projects with right skills and training.
Technical oversight of all the ongoing project.
Train & Enforce PM Process on Delivery Team members.
Managing Escalations relating to resources in a Project.
Monitor CSAT scores and plan long term rectifications for Poor scores.
Maintain up-to-date repository of tools, templates methods and processes for delivery of Practices/ Services.
Drive adoption of Innovations executed by Practices.
Achieve and maintain quality certifications and compliance to their processes.
Periodic strategic planning for balanced portfolio of offerings.
Achieve The Target Delivery margin volume and percentage.

Security OperationsIT AuditInformation Security StandardsRisk AssessmentSecurity Information and Event Management (SIEM)Security Incident Management

Project Manager

Mar 2014 – Jun 2015 · 1 yr 3 mos

Responsible for all the services provided by Paladion to the Bank.
Responsible for maintaining service level without compromising on quality of work.
Ensure project delivery in accordance with client expectations and according to approved project plan.
Being in a highly regulated environment, helping team to understand and adhere to regulatory and/or statutory requirements.
Formulating the dashboards to highlight the outstanding risks to the top management.
Co-ordinating with Paladion’s backend teams for Ad-hoc requirements.
Task management and delegation of work as and when needed.
Addressing the monthly and quarterly review meetings with the IS team.
Provide regular project updates, and effectively manage any project risks.
Manage client engagement & client communication through the project.
Provide guidance to project team members as required.
First point of escalation to resolve any project issues along with client project sponsor.
Constantly reviewing the processes associated with the services provided and proposing the enhancements.

IT Audit

Solution Architect

Jul 2012 – Jun 2014 · 1 yr 11 mos

Responsible for designing of solution’s based on the customer requirement and available budget.
Perform Proof-of-Concepts (POC) against the agreed Use cases.
Clarifying technical queries related to solution or product.
Making technical pre-sales presentations to the customer as part of the sales pitch.
Acting as first level of escalation for technical issues.
Preparing proposals in response to RFP’s.
Liaise with client project sponsor and client project coordinator during project implementation.
Technologies implemented are DLP, Vulnerability Management (VM), Configuration Audit (CA), Data classification and labelling.
Process development for DLP operations, VM/CA operations.
Creating Data register for DLP operations.

Information security consutlant

Jul 2007 – Jul 2012 · 5 yrs

Implementing ISO27001 framework in leading banks and telecom companies.Technical vulnerability assessment, penetration testing, application security assessment and server/device securing procedures. Implementing and auditing IT processes using international security and IT management standards. Developing and implementing IT processes aligned with business objectives for effective data management. Designing templates and streamlined reporting processes. Designing appropriate security controls & audit procedures for effective and efficient implementation and measurement of enterprise security.

Threat & Vulnerability ManagementIT AuditInformation Security StandardsRisk AssessmentSecurity Incident Management

E4e

Technical support Engg- Sonicwall

Sep 2005 – May 2007 · 1 yr 8 mos

Designing and implementing security policies on enterprise level sonicwall security devices.
Implementing ISMS policies with help of State full Packet Inspection
Designed and configured site to site and client to site vpn policies.
Designed and configured Wan fail over and load balancing on the high end firewalls like Sonicwall 5060.
Designed and configured High Availability or hardware fail over.
Designed and Iplimented tunnel and transport VPN’s with sonicwalls and other VPN vendors.
Designed and configured sonicwall to act as vpn concentrators.
Designed and configured sonicwalls to Hub and Spoke vpn set ups.
Designed and configured the Sonicwall to route all the internet traffic through the VPN tunnels.
Worked extensively on the web content filter policies and devices.
Integrated the sonicwall security with the VLANS.
Implemented and maintained Enforced Network Antivirus.
Integrated the Sonicwalls with Gate Routers and exsisting network.