About
Technology & Security Transformation Leader | 17+ Years of Global IT & Cybersecurity Leadership Experienced in executing enterprise vision and strategy across captive and non-captive service organizations. Proven track record in building, implementing, and leading modern global IT and security organizations with expertise in CXO-level stakeholder engagement, multi-geography program delivery, and security transformation initiatives. Core Competencies: • Strategic Leadership: CXO-level stakeholder management, global cybersecurity strategy, maturity and posture improvement, regulatory compliance alignment, security culture development, business continuity, and transformation programs. • Cybersecurity Operations: Blue/Red Teaming, SOC Operations, Threat Intelligence, XDR, SOAR, Incident Response (IR), DFIR, TTP/IOC/IOA analysis, cyber kill chain, insider threat and external threat management, breach investigation. • Application & Cloud Security: DevSecOps, AppSec (OWASP, SAST, DAST, IAST), SCA automation, CPSM, ASPM, CNAPP solutions, CASB, Cloud Security (Azure Defender, AWS, GCP Chronicle), API security, WAF (Azure, AWS, FortiWAF) web and wireless security. • Governance, Risk & Compliance: Risk Management (NIST 800-53, ISO 27001-2013, ISO 27001-2022), Data Privacy (GDPR, HIPAA, CCPA, PIMS/ISO 27701), TPRM, due diligence, ISMS, audit & GRC tools (AuditBoard, OneTrust, MetricStream). • Technical Expertise: AI SOC, SIEM (IBM QRadar, Azure Sentinel), EDR/XDR/MDR (CrowdStrike, Symantec, Trend Micro, SentinelOne, Sophos), malware analysis, VAPT tools (Nessus, Qualys, NMAP, Metasploit, Burp Suite, Wireshark), encryption, OSINT. • Frameworks & Models: MITRE ATT&CK, STRIDE, PASTA, NIST CSF, COBIT, ITIL, ISO, AI RMF, Zero Trust Architecture (Zscaler, Cloudflare, Fortinet). • Identity & Data Protection: IDAM (CyberArk), DLP, Privacy Programs (NIST 800-53, ISO 27701), data protection and breach response, encryption technologies. • Program & Project Management: Large-scale MSP/MSSP programs, budget planning (CapEx/OpEx), due diligence, vendor management, NPS improvement, regulatory compliance programs (PCI DSS, HIPAA, FISMA, FIPS). Certifications & Training: • Security & Risk: CISSP, CISM, AWS Security, Azure Security, CyberArk, • Cloud & DevOps: Azure, AWS, DevSecOps • Project & Service Management: ITIL v3 • Technical: MCITP,MCSE • Memberships: ISACA, ISC2
Work experience
Deputy CISO- Cyber Security at Mashreq Corporate & Investment Banking Group, Apr 2026 - Present · 6 mos, Remote
Senior Cyber and Information Security Leader at Odessa, Dec 2023 - Apr 2026 · 2 yrs 5 mos
Enterprise Cloud Security Senior Architect at Unisys, Apr 2022 - Dec 2023 · 1 yr 9 mos
Enterprise Security Architect at Unisys, Apr 2022 - Dec 2023 · 1 yr 9 mos, Provided hands-on security engineering expertise across diverse technology platforms spanning cloud, hybrid, and on-premises environments.
Security Architect at Tata Consultancy Services, Jan 2022 - Apr 2022 · 4 mos, Provided cloud security architecture design and implementation across AWS and Azure environments.
Cloud Security Senior Architect at Capgemini, May 2020 - Dec 2021 · 1 yr 8 mos, Bengaluru, Karnataka, India
Senior Security Architect at Capgemini, May 2020 - Dec 2021 · 1 yr 8 mos, Possessed strong working knowledge in core security domains: GRC, Azure IAM, Security Operations, Application Security, Data Security, Infrastructure, and Virtualization Security.
