Headline

Expert Cyber Security Professional Guiding medium and large Businesses on Cyber - Strategic, Security, Governance, Risk, Global Compliance (SOC2, PCI-DSS, NIST, etc), Privacy & Transformation leader.

About

Information Security Specialist with 17+ years of experience in providing technology Security and information management Consulting solutions, review implementation, reduce surface attack of an organization, analyze technology Risk and implement controls to protect Network ,Application, Computing resources and Cloud assets. Qualification includes a bachelor of Science degree in computer Science with ISO 27001:2013 LA, ITIL certification and having experience of various GRC security tools, technologies and best practices.

Location

Bengaluru

Work experience

Cyber Strategy and Security at PayU, Sep 2022 - Present · 3 yrs 11 mos, India, IT Risk | Cyber Security | Cyber Strategy | Cyber Resilient | Business Continuity | Frameworks | IT Audit | IT Security | AI Security | AI Governance | Cybersecurity Legal Compliance & Regulatory compliance. Performed multiple roles such as CISO, DPO, CDO, BCP Head etc at Wibmo Inc (Payu Digtal Labs) • Provide guidance and counsel to the CEO/Board and key members of the Business leadership team, working closely with senior administration, business leaders, and the developer community in defining objectives for information security, while building relationships and goodwill. • Lead the development and implementation of effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation. • Lead efforts to internally assess, evaluate and make recommendations to management regarding the adequacy of the security controls for the Company's information and technology systems. • Work with Internal Audit, Finance controller, Legal and outside consultants as appropriate on required security assessments and audits. • Work with company leadership and relevant responsible compliance department leadership to build cohesive security and compliance programs for the company to effectively address state and Country statutory and regulatory requirements. - Enabling Wibmo to create Sustainable Competitive Advantage in Pay Tech space. -Received multiple certifications ( ISO 27001:13, ISO 27701, PA-DSS, SOC 2, PCI-DSS, PCI-S3, PCI-SSLC,RBI-PPI wallet, PA PG licenses) in record time . - Helped Wibmo Inc India to scale in NIST Cyber maturity scale from 1.5 to 3.5 in 12 months - Achieved number of certifications like SOC2, GDPR, ISO 27001:13, PCI-DSS, PA-DSS, PCI-S3, PCI-SSLC,RBI-PPI wallet, PA PG licenses in last 12 months. -Created the Cloud Security Framework, Privacy Framework, Application Security framework, DevSecOps framework

Senior Security Manager at PayU Digital Labs (Wibmo), Sep 2022 - Present · 3 yrs 11 mos, Directed enterprise cybersecurity strategy and governance for regulated payment platforms supporting fintech operations. Led cybersecurity, IT risk, privacy, and resilience programs across payment infrastructure. Managed a 15-member security team across GRC, security engineering, and compliance. Owned $2M cybersecurity budget including vendor strategy and program prioritization. Reported to Group CISO and advised executive leadership on cyber risk posture. Enabled cross-border payment expansion by achieving PAPG Cross-Border certification supporting global transactions. Achieved SOC2, PCI-DSS, ISO 27001, ISO 27701, RBI PPI Wallet, and Payment Gateway certifications within 12 months. Built Cloud Security, Privacy, DevSecOps, and Application Security governance frameworks. Established cyber resilience and business continuity strategies aligned with fintech regulatory expectations.

Manager - GRC Consultant at Ola, Jan 2022 - Sep 2022 · 9 mos, India, Strategic Third-Party Security Assessment Implementation and Governance Solutions for Start-up's (OLA group of companies)

Sr. Lead - Information Security Auditor at Envestnet | Yodlee India, Jul 2018 - Jan 2022 · 3 yrs 7 mos, Bengaluru Area, India, Part of Yodlee Security Office team reporting to Director of Information Security. - Audit and review for IT risk and compliance. Technical risk assessment, reporting and remediation review for IT risk in different products. - Led company through audits achieving SOC 2 Type 1 and PCI/AUP certification - Collaborate with product, legal, and engineering teams to ensure compliance with various regulatory. - Managed the development and maintenance of information security policies and standards. Conducted ongoing evaluation of policies and standards for appropriateness with organization needs.

Security Consultant at DXC Technology, Aug 2016 - Jul 2018 · 2 yrs, Bengaluru Area, India, Vulnerability Management & integration program for Application, Infrastructure and cloud assets, Enterprise Risk management, Technology Risk Assessment,Cloud security assessments, Design reviews,Governance and compliance, ISO 27002 implementation, IT Audit, SOD reviews, Change management review, asset Management, System classification, Application toll gate review, handling Security exception, Security approval for change execution, driving COP session for cyber Security awareness across delivery.

Education

Bachelor of Science, Electronics, bangalore university