Pravinkumar Jha profile photo 1 on Tal

Pravinkumar Jha

Head of Product & Cloud Security | CISO-Track Executive | AI Security · DevSecOps Leader of the Year 2026 | BSides Advisor

Bengaluru

14+ years of work experience

PropertyGuru Group
Aug 20242 yrs 2 mosPresent

Bengaluru, Karnataka, India

As the Engineering Manager for Product Security at PropertyGuru Group, I spearhead the creation and implementation of comprehensive Information Security roadmaps. My focus spans across Application Security, Cloud Security, and Infrastructure Security, ensuring robust protection for our entire product line, including AI security, across five countries. I lead a dynamic team of talented engineers, driving innovation and excellence in security practices. Together, we proactively identify and mitigate risks, ensuring the highest standards of security and compliance. My role involves strategic planning, cross-functional collaboration, and continuous improvement to safeguard our digital assets and maintain the trust of our users. Additionally, I lead the efforts in automation, integration, and self-service as part of the Information Security Center of Excellence (Infosec COE). This initiative enhances efficiency and empowers teams with the tools and processes needed to maintain a secure and agile environment.
Abbott
Oct 20237 mosApr 2024

Spearheaded the establishment of Product Security and Automation Testing teams in India, focusing on hiring top talent and procuring office space to support team operations. Collaborated with cross-functional teams to identify, prioritize and remediate vulnerabilities based on risk, severity and potential impact. Managed the team budget effectively, optimizing resource allocation to meet project demands and financial objectives. Conducted performance appraisals, one-on-one sessions, and provided constructive feedback to team members to foster their professional growth and development. Led the implementation of security measures and testing processes to ensure product quality and compliance with industry standards and regulations. Provided technical expertise and guidance on vulnerability management best practices to application owners and developers.
eClinicalWorks
Aug 20194 yrs 4 mosNov 2023

Mumbai, Maharashtra, India

Implemented Secure SDLC and DevSecOps: Integrated security into every phase of the software development lifecycle, ensuring secure coding practices, continuous security assessments, and automated security testing. Promoted a DevSecOps culture to embed security within the DevOps pipeline. Architected Application Security Testing: Designed and implemented comprehensive security testing frameworks to identify and mitigate vulnerabilities. Automated Security Review and Testing: Pioneered automation of security reviews and testing processes, improving efficiency and accuracy. Established Organizational Security Standards: Developed and enforced stringent security standards in compliance with HIPAA, ISO 27001, OWASP, and SANS guidelines. Drove Compliance with ISO Standards: Ensured adherence to ISO standards for quality management, software development, software testing, and security policies. Governance of Software Testing Life Cycle: Established governance protocols for the software testing life cycle, enhancing security and quality assurance. Merged R&D with Software Delivery Cycle: Aligned R&D initiatives with the software delivery cycle, incorporating DevOps, SDLC, STLC, and SSDLC methodologies. Managed Cross-Functional Teams: Led diverse teams to achieve security and compliance goals, fostering collaboration and innovation. Solution-Oriented Technology Acceptance Architecture: Developed architectures that prioritize security while embracing new technologies. Conducted Training and Skill Development: Provided training and skill development programs focused on cybersecurity best practices. Managed Vendor Relationships: Oversaw vendor management to ensure compliance with security standards. Handled SAM, ISO & Quality Audits: Managed software asset management, ISO, and other quality audits, continuous improvement in security practices. Initiated Innovative Quality Implementations: Introduced innovative approaches to enhance security and quality in software development.
Thakur Institute of Management Studies and Research
Jan 20183 yrsDec 2020

Mumbai, Maharashtra, India

• Taught MBA students quality assurance, cybersecurity, and project management with real-life experience • Developed curriculum to engage students in practical applications of course material • Mentored students to excel in their coursework and prepare for future careers
eClinicalWorks
Feb 20127 yrs 7 mosAug 2019

Mumbai Area, India

Started of in this company as. Product specialist, worked in entire SDLC cycle, Managed IT infrastructure, support and services for Mumbai location. Implemented security in infrastructure and product. Developed QA team and application security team based on OWASP standard. Worked with network and other it teams to have a scalable and robust architecture in place. Successfully conducted software and asset audit and helped save company 100 thousands of dollars. Worked with compliance team for security risk and corporate risk assesment and HIPAA audit. Implemented various ISO standards in the team. Worked with HR in implementing digital HR solutions. Lead multiple teams of very strong and talented people to help me in all projects worked here, not limited to any technology. Overall worked on every aspect that is required in product lifecycle including customer expectation and need management and devops.
CSS Corp
Jul 20117 mosJan 2012

IT support for Vonage a leading VOIP service provider. Troubleshooting on RTP and SIP protocols. Monitoring network usage.

Pravinkumar’s AI Stack

antigravity
antigravity
claude code
claude code
claude
claude
codex
codex
geminicli
geminicli
github copilot
github copilot

Education

Thakur College of Engineering and Technology

Master of Engineering - MEng, Information Technology

Thakur College of Engineering and Technology

20232 yrs2025

Master of Business Administration - MBA, Information Technology Management

Thakur Institue of Management Studies and Research

Join Pravinkumar and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Pravinkumar Jha on Tal

Headline

Head of Product & Cloud Security | CISO-Track Executive | AI Security · DevSecOps Leader of the Year 2026 | BSides Advisor

About

Cybersecurity executive with 14+ years building and leading enterprise-wide security functions from the ground up - specialising in AI/GenAI security, DevSecOps, and product security at scale across high-growth product companies and regulated global environments. Recognised as DevSecOps Leader of the Year 2026 (India DevSec Show, Mumbai) and Best Product Security Leader 2026 (CyberShield India Summit). Speaker at BSides Ahmedabad, VulnCon, CyberSec India Expo, Haxnation, and Identity Shield 2026. Board of Advisors — BSides India. Published security researcher (IJARCCE 2025). Currently Head of Product & Cloud Security at PropertyGuru Group, leading enterprise-wide security strategy across a 4-country APAC platform — owning AI/GenAI security architecture, PSIRT, DevSecOps, cloud security (99% CNAPP compliance score), and board-level risk reporting. Previously built eClinicalWorks' entire India security organisation from zero to 80+ engineers across 11 years. What I specialise in: 🔐 AI/GenAI Security — secured production LLM features, prompt injection controls, OWASP LLM Top 10 threat modelling, and deepfake threat awareness programmes 🛡️ DevSecOps & CI/CD Security — scaled SAST/DAST to 100% repo coverage, integrated full security toolchain via GitHub Actions ☁️ Cloud Security — SentinelOne CNAPP, Zscaler SASE, Cloudflare WAF, multi-cloud AWS/Azure 🎯 Offensive Security — Bug Bounty (YesWeHack), AI-powered pentesting (PentAgi, Strix), VAPT, BAS 📋 Compliance & Governance — ISO 27001 (Lead Auditor), SOC 2, PCI-DSS, HIPAA, GDPR, DPDP Act, CERT-In Targeting CISO, Director of Security, and Head of Security roles where I can build, scale, and lead security functions that enable business growth rather than block it. 📩 Open to conversations — pravin.cse.jha@gmail.com

Location

Bengaluru

AI stack

antigravity

claude code

claude

codex

geminicli

github copilot

Work experience

Head of Product & Cloud Security (Global) at PropertyGuru Group, Aug 2024 - Present · 2 yrs 2 mos, Bengaluru, Karnataka, India, As the Engineering Manager for Product Security at PropertyGuru Group, I spearhead the creation and implementation of comprehensive Information Security roadmaps. My focus spans across Application Security, Cloud Security, and Infrastructure Security, ensuring robust protection for our entire product line, including AI security, across five countries. I lead a dynamic team of talented engineers, driving innovation and excellence in security practices. Together, we proactively identify and mitigate risks, ensuring the highest standards of security and compliance. My role involves strategic planning, cross-functional collaboration, and continuous improvement to safeguard our digital assets and maintain the trust of our users. Additionally, I lead the efforts in automation, integration, and self-service as part of the Information Security Center of Excellence (Infosec COE). This initiative enhances efficiency and empowers teams with the tools and processes needed to maintain a secure and agile environment.

Regional Security Lead - India at Abbott, Oct 2023 - Apr 2024 · 7 mos, Spearheaded the establishment of Product Security and Automation Testing teams in India, focusing on hiring top talent and procuring office space to support team operations. Collaborated with cross-functional teams to identify, prioritize and remediate vulnerabilities based on risk, severity and potential impact. Managed the team budget effectively, optimizing resource allocation to meet project demands and financial objectives. Conducted performance appraisals, one-on-one sessions, and provided constructive feedback to team members to foster their professional growth and development. Led the implementation of security measures and testing processes to ensure product quality and compliance with industry standards and regulations. Provided technical expertise and guidance on vulnerability management best practices to application owners and developers.

Head of Application Security at eClinicalWorks, Aug 2019 - Nov 2023 · 4 yrs 4 mos, Mumbai, Maharashtra, India, Implemented Secure SDLC and DevSecOps: Integrated security into every phase of the software development lifecycle, ensuring secure coding practices, continuous security assessments, and automated security testing. Promoted a DevSecOps culture to embed security within the DevOps pipeline. Architected Application Security Testing: Designed and implemented comprehensive security testing frameworks to identify and mitigate vulnerabilities. Automated Security Review and Testing: Pioneered automation of security reviews and testing processes, improving efficiency and accuracy. Established Organizational Security Standards: Developed and enforced stringent security standards in compliance with HIPAA, ISO 27001, OWASP, and SANS guidelines. Drove Compliance with ISO Standards: Ensured adherence to ISO standards for quality management, software development, software testing, and security policies. Governance of Software Testing Life Cycle: Established governance protocols for the software testing life cycle, enhancing security and quality assurance. Merged R&D with Software Delivery Cycle: Aligned R&D initiatives with the software delivery cycle, incorporating DevOps, SDLC, STLC, and SSDLC methodologies. Managed Cross-Functional Teams: Led diverse teams to achieve security and compliance goals, fostering collaboration and innovation. Solution-Oriented Technology Acceptance Architecture: Developed architectures that prioritize security while embracing new technologies. Conducted Training and Skill Development: Provided training and skill development programs focused on cybersecurity best practices. Managed Vendor Relationships: Oversaw vendor management to ensure compliance with security standards. Handled SAM, ISO & Quality Audits: Managed software asset management, ISO, and other quality audits, continuous improvement in security practices. Initiated Innovative Quality Implementations: Introduced innovative approaches to enhance security and quality in software development.

Visiting Faculty at Thakur Institute of Management Studies and Research, Jan 2018 - Dec 2020 · 3 yrs, Mumbai, Maharashtra, India, • Taught MBA students quality assurance, cybersecurity, and project management with real-life experience • Developed curriculum to engage students in practical applications of course material • Mentored students to excel in their coursework and prepare for future careers

Team Lead at eClinicalWorks, Feb 2012 - Aug 2019 · 7 yrs 7 mos, Mumbai Area, India, Started of in this company as. Product specialist, worked in entire SDLC cycle, Managed IT infrastructure, support and services for Mumbai location. Implemented security in infrastructure and product. Developed QA team and application security team based on OWASP standard. Worked with network and other it teams to have a scalable and robust architecture in place. Successfully conducted software and asset audit and helped save company 100 thousands of dollars. Worked with compliance team for security risk and corporate risk assesment and HIPAA audit. Implemented various ISO standards in the team. Worked with HR in implementing digital HR solutions. Lead multiple teams of very strong and talented people to help me in all projects worked here, not limited to any technology. Overall worked on every aspect that is required in product lifecycle including customer expectation and need management and devops.

IT Support Analyst at CSS Corp, Jul 2011 - Jan 2012 · 7 mos, IT support for Vonage a leading VOIP service provider. Troubleshooting on RTP and SIP protocols. Monitoring network usage.

Education

Master of Engineering - MEng, Information Technology, Thakur College of Engineering and Technology

Master of Business Administration - MBA, Information Technology Management, Thakur Institue of Management Studies and Research