Headline

Global Cyber, Privacy & AI Risk Leader | Cyber Advisory | AIGP • CIPP/E • CRISC • DSCI DPO • ISO 27701 LI | Ex-GSK, Dr. Reddy’s, Deloitte, IBM, Wipro ,Tata| MBA

About

Executive Cyber Advisory, Data Privacy & AI Governance Leader with 14+ years of enterprise experience architecting digital trust programs for Fortune 500 multinationals (Haleon,GSK, Dr. Reddy’s, Wipro,Deloitte, IBM,Tata). Recognized for establishing multi-jurisdictional compliance models aligned with GDPR, EU AI Act, US State Laws (CCPA), HIPAA, and India’s DPDP Act. I specialize in bridging the gap between C-suite strategy, complex global privacy regulations, and technical risk execution. My focus centers on transforming regulatory mandates into scalable trust frameworks, enabling business innovation while safeguarding enterprise data assets. Core Leadership Impact & Expertise Executive Risk Strategy & Governance: Directing enterprise-wide GRC, SOx change governance, and cyber risk reporting for Executive Boards, Risk Committees, and C-suite stakeholders. Emerging AI & Digital Transformation: Operationalizing AI safety controls (AIGP), automation/RPA risk frameworks, and enterprise-wide AI integrations (Copilot, automated IDAM workflows). Global Privacy Architecture: Structuring cross-border Data Protection Impact Assessments (DPIAs), Privacy-by-Design protocols, and third-party risk management (TPRM) ecosystems. Integrated ISO Management Systems: Designing and auditing multi-framework management systems across ISO 27001 (Security), ISO 27701 (Privacy), ISO 22301 (BCMS), and ISO 42001 (AI Management). Enterprise Platform Engineering: Strategic rollouts and enterprise integration of market-leading privacy technologies, including OneTrust, BigID, Securiti.ai, ServiceNow, and RSA Archer GRC. Throughout my career across Life Sciences, Consumer Healthcare, Energy, Cloud, and FMCG sectors, I have built and led high-performing cross-functional teams, audited multi-million-dollar vendor environments, and compressed enterprise risk review cycles without compromising regulatory standards.

Location

Bengaluru

AI stack

gemini

Microsoft Copilot

Work experience

Senior GRC Manager at Haleon, Sep 2024 - Present · 2 yrs 1 mo, Bengaluru, Karnataka, India, Enterprise AI & Automation Governance: Redesigned the business risk evaluation model for Robotic Process Automation (RPA) and AI workflows, compressing review cycles from months to 2 hours (a 98% reduction) while preserving strict compliance standards. ​Executive Risk Board Reporting: Architected and presented Risk Board and Governance decks for C-suite leaders, establishing real-time tracking metrics and driving Archer GRC data quality to zero discrepancies. ​SOx & Digital Transformation: Executed key initiatives under the SOx Change Governance Board, enabling automated controls testing and embedding compliance frameworks across enterprise IDAM, Workday, OneTrust, and Copilot AI chatbot rollouts. ​Audit Leadership & Innovation: Directed IBM external audit activities to 100% remediation closure in Archer; won the GRC Shark Tank Award for automation innovation and earned 3 Silver and 2 Bronze corporate performance awards.

Principal Privacy at Dr. Reddy's Laboratories, Aug 2022 - Aug 2024 · 2 yrs 1 mo, Hyderabad, Telangana, India, Global Privacy Program Leadership: Built and executed the enterprise-wide Data Privacy strategy across international jurisdictions, serving as primary advisor to senior executives and the Board of Directors on data protection and regulatory exposure. ​Privacy Architecture & Risk Mitigation: Spearheaded global gap assessments, application onboarding risk reviews, and Data Protection Impact Assessments (DPIAs), embedding Privacy-by-Design across core systems. ​Third-Party Risk Architecture (TPRM): Served as Core Tech Privacy Officer and strategic advisor to the Global Privacy Committee (led by the CFO, CIO, and Legal Head), driving cross-functional privacy architecture and negotiating TPRM controls with Procurement and Legal. ​Security & Incident Operations: Established DevSecOps security/privacy controls, oversaw DLP and data classification deployments, and authored enterprise incident response playbooks.

Senior GRC Manager at GSK, Feb 2021 - Aug 2022 · 1 yr 7 mos, Bengaluru, Karnataka, India, • Global Strategy Execution: Oversaw end-to-end GRC strategy for the R&D Technology portfolio and Core Data Ecosystem (CODE Orange), managing compliance for 250+ cloud and on-premise application projects. • Tool & Analytics Modernization: Implemented RSA Archer enterprise modules and custom Power BI analytics dashboards, enabling real-time risk visibility for executive stakeholders. • Leadership & Audit: Managed technical risk teams in onboarding systems into regulated R&D portfolios while ensuring compliance with GxP and non-GxP frameworks.

Technical Lead at Wipro Limited, Jun 2019 - Feb 2021 · 1 yr 9 mos, Bengaluru, Karnataka, India, • US Market Regulatory Engagements: Led CCPA compliance program delivery for a major US retail client (gap assessments, remediation roadmaps, privacy frameworks); architected OneTrust implementations for a US insurance giant impacting 100+ applications and 70+ vendors. • Privacy Automation Architecture: Deployed automated DSAR, Cookie Consent, and Choice Management workflows across OneTrust, BigID, and ServiceNow platforms. • Pharmaceutical GRC Delivery: Managed GRC portfolio operations for a global pharma client, leading application smart controls testing and executive risk reporting via Power BI.

Risk Advisory Consultant at DELOITTE INDIA, Jun 2018 - Jun 2019 · 1 yr 1 mo, Bengaluru, Karnataka, India, • GDPR Readiness & Cloud Governance: Led GDPR readiness initiatives for international clients, earning the Deloitte "Move The Dot" award; designed compliance readiness assessment frameworks for cloud service providers. • Enterprise Risk Advisory: Managed ITGC control scoping, VAPT, SOC2 Type II reviews, and application risk assessments for Fortune 500 oil & gas entities.

Security and Privacy Consultant at IBM India Private Limited, May 2016 - Jun 2018 · 2 y 1 mo, Bangalore, North American Regional Compliance: Managed security assessments, contract compliance, and privacy assessment across North American client accounts using the IBM Risk Framework. • Audit & ISO Certification Lead: Led ISO 27001 certification/surveillance audits, HIPAA risk assessments, and SOC2 reviews for critical accounts, including HCSC Healthcare.

Assistant Manager at TATA AUTOCOMP HENDRICKSON SUSPENSIONS PRIVATE LIMITED, Jul 2011 - Jun 2014 · 2 y 11 mo, Pune, Led operational risk management, FMEA, Kaizen, and internal audits for ISO 9001/14001/18001 standards, earning a CEO Commendation for project execution

Education

Master of Business Administration (MBA), Information Technology Business Management, SYMBIOSIS INTERNATIONAL UNIVERSITY

B.TECH, Mechanical Engineering, National Institute of Technology Raipur