Santosh Kumar

About

𝗖𝗵𝗶𝗲𝗳 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗢𝗳𝗳𝗶𝗰𝗲𝗿 (CISO) | 𝗖𝗵𝗶𝗲𝗳 𝗔𝗜 𝗢𝗳𝗳𝗶𝗰𝗲𝗿 (CAIO) | 𝗙𝗲𝗹𝗹𝗼𝘄 𝗶𝗻 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 (𝗙𝗜𝗣) Santosh is a cybersecurity and AI governance leader with 26+ years of global experience across cybersecurity, data protection, privacy, digital risk, and responsible AI. His expertise spans enterprise cyber governance, technology risk, security engineering, SOC operations, incident response, and large-scale security transformation. A Fellow of Information Privacy (FIP), Santosh holds globally recognized certifications including CISSP, PMP, CISA, CHFI, CEH, CIPP/E, and CIPM. Having served as CISO across both product and services organizations, he has built and led globally distributed security teams across highly regulated industries. He works closely with leadership, translating cyber and technology risks into strategic insights that drive informed decisions and regulatory confidence. Santosh also serves as a Data Protection & Privacy Grievance Officer, overseeing global privacy law compliance. Santosh leads enterprise Governance, Risk & Compliance (GRC) programs with expertise across SOC 1/2, PCI DSS, HITRUST, TISAX, CyberGRX, and Cyber Essentials Plus, along with global standards including ISO 27001, ISO 22301, ISO 20000, ISO 42001, and ISO 21434. As Chief AI Governance Officer (CAIGO), he leads AI and Agentic AI governance, driving compliance with regulations such as the EU AI Act. His work includes AI risk classification, human-in-the-loop oversight, responsible AI frameworks, and ISO/IEC 42001 implementation to enable trustworthy AI adoption. He also leads ISMS and BCMS programs, strengthening business continuity, disaster recovery, resilience testing, and enterprise crisis preparedness. Santosh oversees 24×7 Security Operations, integrating threat intelligence, vulnerability management, UEBA, and AI-driven detection to improve SOC maturity and reduce MTTD and MTTR through advanced SIEM and SOAR. Technically, Santosh brings leadership across AWS, Azure, and GCP, driving Zero Trust architectures, secure cloud transformation, and AI-driven SecOps, while aligning security with modern SDLC and agile delivery. Beyond enterprise leadership, Santosh is a trusted advisor and speaker on cybersecurity, AI security, privacy, and digital risk governance, helping organizations build secure, intelligent, and future-ready digital enterprises. 📩 [email protected] 📩 [email protected]

Experience

• Mphasis ()
  • Chief Information Security Officer (CISO)
    Jul 2025 - Present · 1 yr 1 mo

    ✅ 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, 𝐑𝐢𝐬𝐤 & 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 (𝐆𝐑𝐂): Defining 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬 and 𝐫𝐞𝐠𝐮𝐥𝐚𝐭𝐨𝐫𝐲 𝐚𝐥𝐢𝐠𝐧𝐦𝐞𝐧𝐭. Overseeing 𝐈𝐒𝐎 𝟐𝟕𝟎𝟎𝟏/𝟒𝟐𝟎𝟎𝟏/𝟐𝟐𝟑𝟎𝟏/𝟮𝟬𝟬𝟬𝟬, 𝐒𝐎𝐂𝟏/𝟐, 𝐏𝐂𝐈-𝐃𝐒𝐒, 𝐇𝐈𝐓𝐑𝐔𝐒𝐓, 𝐓𝐈𝐒𝐀𝐗, 𝐂𝐲𝐛𝐞𝐫𝐆𝐑𝐗, 𝐂𝐲𝐛𝐞𝐫 𝐄𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥 𝐏𝐥𝐮𝐬 and client-mandated controls ✅ 𝐃𝐚𝐭𝐚 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐋𝐚𝐰𝐬 – 𝐆𝐫𝐢𝐞𝐯𝐚𝐧𝐜𝐞 𝐎𝐟𝐟𝐢𝐜𝐞𝐫 ✅ 𝐈𝐒𝐌𝐒 & 𝐁𝐂𝐌𝐒 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Ensuring 𝐁𝐂𝐏/𝐃𝐑 strategy, 𝐫𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐭𝐞𝐬𝐭𝐢𝐧𝐠, and 𝐜𝐥𝐢𝐞𝐧𝐭 𝐚𝐬𝐬𝐮𝐫𝐚𝐧𝐜𝐞 ✅ 𝐓𝐞𝐜𝐡𝐧𝐨𝐥𝐨𝐠𝐲 𝐑𝐢𝐬𝐤, 𝐂𝐥𝐨𝐮𝐝 & 𝐀𝐈 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Defining 𝐂𝐲𝐛𝐞𝐫 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐲 & 𝐑𝐨𝐚𝐝𝐦𝐚𝐩. Governing 𝐚𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 𝐬𝐭𝐚𝐧𝐝𝐚𝐫𝐝𝐬, 𝐜𝐥𝐨𝐮𝐝 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤𝐬, 𝐀𝐈 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐂𝐨𝐄 ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 (𝐒𝐎𝐂) & 𝐓𝐡𝐫𝐞𝐚𝐭 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Overseeing 24×7 𝐒𝐎𝐂, 𝐭𝐡𝐫𝐞𝐚𝐭 𝐢𝐧𝐭𝐞𝐥, 𝐕𝐌, 𝐔𝐄𝐁𝐀, and 𝐀𝐈-𝐝𝐫𝐢𝐯𝐞𝐧 𝐝𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧𝐬. Improving 𝐒𝐎𝐂 𝐞𝐟𝐟𝐢𝐜𝐢𝐞𝐧𝐜𝐲, 𝐌𝐓𝐓𝐃, and 𝐌𝐓𝐓𝐑 via 𝐒𝐈𝐄𝐌 & 𝐒𝐎𝐀𝐑 ✅ 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 & 𝐂𝐲𝐛𝐞𝐫 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬: Leading enterprise 𝐈𝐑, 𝐜𝐫𝐢𝐬𝐢𝐬 𝐦𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, 𝐟𝐨𝐫𝐞𝐧𝐬𝐢𝐜𝐬, 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦𝐢𝐧𝐠, and preparedness for 𝐫𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞, 𝐳𝐞𝐫𝐨-𝐝𝐚𝐲, and 𝐬𝐮𝐩𝐩𝐥𝐲-𝐜𝐡𝐚𝐢𝐧 threats ✅ 𝐒𝐮𝐛𝐬𝐢𝐝𝐢𝐚𝐫𝐲 𝐂𝐲𝐛𝐞𝐫 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞: Standardizing 𝐩𝐨𝐬𝐭𝐮𝐫𝐞, 𝐦𝐨𝐧𝐢𝐭𝐨𝐫𝐢𝐧𝐠, and 𝐚𝐮𝐝𝐢𝐭𝐬 across global entities ✅ 𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐄𝐧𝐚𝐛𝐥𝐞𝐦𝐞𝐧𝐭 & 𝐂𝐥𝐢𝐞𝐧𝐭 𝐓𝐫𝐮𝐬𝐭: Supporting deals and strengthening 𝐜𝐥𝐢𝐞𝐧𝐭 𝐭𝐫𝐮𝐬𝐭 ✅ 𝐌&𝐀 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Leading 𝐩𝐫𝐞-𝐚𝐜𝐪𝐮𝐢𝐬𝐢𝐭𝐢𝐨𝐧 𝐝𝐮𝐞 𝐝𝐢𝐥𝐢𝐠𝐞𝐧𝐜𝐞 and 𝐩𝐨𝐬𝐭-𝐦𝐞𝐫𝐠𝐞𝐫 𝐢𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐢𝐨𝐧 ✅ 𝐄𝐱𝐞𝐜𝐮𝐭𝐢𝐯𝐞 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Presenting 𝐫𝐢𝐬𝐤, 𝐦𝐚𝐭𝐮𝐫𝐢𝐭𝐲, and 𝐬𝐭𝐫𝐚𝐭𝐞𝐠𝐲 to Board ✅ 𝐓𝐚𝐥𝐞𝐧𝐭 & 𝐂𝐮𝐥𝐭𝐮𝐫𝐞: Building a high-performing team and 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲-𝐟𝐢𝐫𝐬𝐭 culture

  • Chief AI Officer (CAIO)
    Nov 2025 - Present · 9 mos

    ✅ Lead enterprise-wide 𝗔𝗜 & 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗔𝗜 𝗚𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 strategy enabling safe, scalable, and compliant AI adoption. ✅ Own 𝗘𝗨 𝗔𝗜 𝗔𝗰𝘁 compliance including 𝗔𝗜 𝗿𝗶𝘀𝗸 𝗰𝗹𝗮𝘀𝘀𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻, high-risk controls, and human oversight. ✅ Establish and operate 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟰𝟮𝟬𝟬𝟭 (𝗔𝗜𝗠𝗦) covering AI, GenAI, and agentic systems. ✅ Define 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗹𝗲 & 𝗘𝘁𝗵𝗶𝗰𝗮𝗹 𝗔𝗜 principles including 𝗙𝗮𝗶𝗿𝗻𝗲𝘀𝘀, 𝗔𝗰𝗰𝗼𝘂𝗻𝘁𝗮𝗯𝗶𝗹𝗶𝘁𝘆, 𝗧𝗿𝗮𝗻𝘀𝗽𝗮𝗿𝗲𝗻𝗰𝘆, 𝗘𝘅𝗽𝗹𝗮𝗶𝗻𝗮𝗯𝗶𝗹𝗶𝘁𝘆, 𝗥𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆, 𝗦𝗮𝗳𝗲𝘁𝘆, 𝗥𝗼𝗯𝘂𝘀𝘁𝗻𝗲𝘀𝘀 & 𝗥𝗲𝗱𝘂𝗻𝗱𝗮𝗻𝗰𝘆, 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 & 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 in line with EU AI Act obligations and ISO/IEC 42001 controls. ✅ Govern the 𝗘𝗻𝗱-𝘁𝗼-𝗘𝗻𝗱 𝗔𝗜 𝗟𝗶𝗳𝗲𝗰𝘆𝗰𝗹𝗲, including autonomous agent design, tool access, memory, and orchestration. ✅ Lead 𝗔𝗜 & 𝗔𝗴𝗲𝗻𝘁 𝗥𝗶𝘀𝗸 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁, addressing autonomy risk, model drift, emergent behavior, and misuse. ✅ Enforce 𝗛𝘂𝗺𝗮𝗻-𝗶𝗻/𝗢𝗻-𝘁𝗵𝗲-𝗟𝗼𝗼𝗽 controls for high-impact and autonomous AI decisions. ✅ Oversee 𝗔𝗜 𝗔𝘂𝗱𝗶𝘁𝘀, 𝗜𝗺𝗽𝗮𝗰𝘁 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁𝘀 & 𝗗𝗼𝗰𝘂𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 ensuring traceability and transparency. ✅ Govern 𝗧𝗵𝗶𝗿𝗱-𝗣𝗮𝗿𝘁𝘆, 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 & 𝗔𝗴𝗲𝗻𝘁 𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗥𝗶𝘀𝗸𝘀. ✅ Act as the 𝗘𝘅𝗲𝗰𝘂𝘁𝗶𝘃𝗲 & 𝗕𝗼𝗮𝗿𝗱 𝗔𝗱𝘃𝗶𝘀𝗼𝗿 on AI autonomy, regulation, and ethical risk posture. ✅ Apply 𝗣𝗿𝗶𝗻𝗰𝗶𝗽𝗹𝗲𝘀 𝗼𝗳 𝗣𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗗𝗮𝘁𝗮 𝗣𝗿𝗼𝗰𝗲𝘀𝘀𝗶𝗻𝗴: 𝗟𝗮𝘄𝗳𝘂𝗹𝗻𝗲𝘀𝘀, 𝗙𝗮𝗶𝗿𝗻𝗲𝘀𝘀 & 𝗧𝗿𝗮𝗻𝘀𝗽𝗮𝗿𝗲𝗻𝗰𝘆; 𝗣𝘂𝗿𝗽𝗼𝘀𝗲 𝗟𝗶𝗺𝗶𝘁𝗮𝘁𝗶𝗼𝗻; 𝗗𝗮𝘁𝗮 𝗠𝗶𝗻𝗶𝗺𝗶𝘇𝗮𝘁𝗶𝗼𝗻; 𝗔𝗰𝗰𝘂𝗿𝗮𝗰𝘆; 𝗦𝘁𝗼𝗿𝗮𝗴𝗲 𝗟𝗶𝗺𝗶𝘁𝗮𝘁𝗶𝗼𝗻; 𝗜𝗻𝘁𝗲𝗴𝗿𝗶𝘁𝘆 & 𝗖𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝘁𝗶𝗮𝗹𝗶𝘁𝘆. ✅ Embed 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 & 𝗗𝗲𝗳𝗮𝘂𝗹𝘁 by applying proactive prevention, privacy-as-default (opt-in), privacy embedded into design, full functionality, end-to-end security, visibility & transparency, and respect for user privacy.

• Bosch Global Software Technologies ()
  • 𝐏𝐫𝐨𝐠𝐫𝐚𝐦 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 – 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲
    Sep 2019 - Nov 2025 · 6 yrs 3 mos

    In this senior leadership role, I directed high-impact cybersecurity programs across global industries, ensuring strategic delivery excellence, optimized execution, and measurable outcomes for mission-critical portfolios. I combined deep domain expertise with strong client stewardship, driving long-term trust and accelerated security maturity across enterprise environments. ✅ 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐜 𝐏𝐫𝐨𝐠𝐫𝐚𝐦 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Managed multi-layered cybersecurity programs end-to-end, ensuring schedule integrity, robust governance, budget alignment, and cross-functional synchronization. Strengthened executive engagement through structured reporting, roadmap definition, and transparent risk communication. ✅ 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Applied expertise in 𝐈𝐒𝐎/𝐒𝐀𝐄 𝟐𝟏𝟒𝟑𝟒, securing SDVs, HPCs, and ADAS systems. Delivered hardened architectures with 𝐀𝐔𝐓𝐎𝐒𝐀𝐑 𝐒𝐞𝐜𝐎𝐂, 𝐂𝐒𝐌, 𝐇𝐒𝐌, 𝐒𝐞𝐜𝐮𝐫𝐞 𝐁𝐨𝐨𝐭, and onboard firewalls. Ensured compliance with 𝐔𝐍𝐄𝐂𝐄 𝐖𝐏.𝟐𝟗, 𝐒𝐀𝐄 𝐉𝟑𝟎𝟔𝟏, and 𝐓𝐈𝐒𝐀𝐗. ✅ 𝐇𝐞𝐚𝐥𝐭𝐡𝐜𝐚𝐫𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Built security frameworks aligned with 𝐅𝐃𝐀, 𝐇𝐞𝐚𝐥𝐭𝐡 𝐂𝐚𝐧𝐚𝐝𝐚, 𝐄𝐔 𝐌𝐃𝐑, and 𝐈𝐄𝐂 𝟖𝟏𝟎𝟎𝟏-𝟓-𝟏, covering device design, lifecycle operations, and post-market surveillance. ✅ 𝐎𝐓 & 𝐈𝐈𝐨𝐓 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Enhanced resilience of 𝐈𝐂𝐒, 𝐒𝐂𝐀𝐃𝐀, 𝐃𝐂𝐒, and 𝐏𝐋𝐂 ecosystems using 𝐍𝐈𝐒𝐓 𝐒𝐏 𝟖𝟎𝟎-𝟖𝟐 and 𝐈𝐒𝐀/𝐈𝐄𝐂 𝟔𝟐𝟒𝟒𝟑 and strengthened manufacturing and industrial safety postures. ✅ 𝐂𝐡𝐢𝐩-𝐭𝐨-𝐂𝐥𝐨𝐮𝐝 𝐄𝐧𝐝-𝐭𝐨-𝐄𝐧𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Architected unified security across embedded modules, edge nodes, cloud workloads, and connected platforms, ensuring cohesive lifecycle protection and scalable resilience. ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 & 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧: Performed 300+ 𝐓𝐡𝐫𝐞𝐚𝐭 & 𝐑𝐢𝐬𝐤 𝐀𝐧𝐚𝐥𝐲𝐬𝐞𝐬 (𝐓𝐚𝐑𝐀), executed VA/PT, fuzzing, and CIS benchmarking.

  • 𝐂𝐡𝐢𝐞𝐟 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐟𝐟𝐢𝐜𝐞𝐫 (𝐂𝐒𝐎) / 𝐂𝐈𝐒𝐎
    Jul 2023 - Nov 2023 · 5 mos

    As the Chief Security Officer, I served as the advisor to leadership on 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲, 𝐝𝐚𝐭𝐚 𝐩𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧, 𝐀𝐈 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, and 𝐆𝐑𝐂, driving enterprise-wide strategy and shaping the organization’s global security posture. I led the design and execution of integrated security frameworks that supported Bosch’s complex portfolio across automotive, manufacturing, cloud, OT, and AI-driven ecosystems. ✅ 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞: Established global governance frameworks including 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬, 𝐑𝐀𝐒𝐈𝐂 structures, and 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐧𝐠 models aligned with 𝐆𝐃𝐏𝐑, 𝐂𝐲𝐛𝐞𝐫 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐀𝐜𝐭, 𝐄𝐔 𝐀𝐈 𝐀𝐜𝐭, and 𝐎𝐄𝐂𝐃 principles, ensuring consistent security governance across global business units. ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐏𝐫𝐨𝐜𝐞𝐬𝐬 (𝐒𝐄𝐏) 𝐋𝐞𝐚𝐝𝐞𝐫: Embedded 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐛𝐲 𝐃𝐞𝐬𝐢𝐠𝐧 & 𝐃𝐞𝐟𝐚𝐮𝐥𝐭 into Bosch’s product development, cloud services, OT/IoT platforms, and manufacturing operations. Implemented structured quality gates, measurable KPIs, and mandatory lifecycle checkpoints to enforce consistent engineering rigor. ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐑𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 (𝐒𝐄𝐏-𝐒𝐑𝐀): Designed the enterprise-wide SRA aligned with 𝐈𝐒𝐎 𝟐𝟕𝟎𝟎𝟏, 𝐒𝐎𝐂 𝟐, 𝐍𝐈𝐒𝐓 𝐂𝐒𝐅, and 𝐍𝐈𝐒𝐓 𝟖𝟎𝟎-𝟓𝟑, enabling unified compliance and streamlined risk management across global engineering teams. ✅ 𝐀𝐈/𝐌𝐋 & 𝐋𝐋𝐌 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞: Built Bosch’s enterprise framework for 𝐀𝐈 𝐫𝐢𝐬𝐤 management, 𝐛𝐢𝐚𝐬 mitigation, 𝐦𝐨𝐝𝐞𝐥 security, 𝐝𝐚𝐭𝐚 𝐥𝐢𝐧𝐞𝐚𝐠𝐞, and 𝐑𝐀𝐆/𝐋𝐋𝐌 fine-tuning. Ensured strong alignment with emerging global AI safety and compliance mandates. ✅ 𝐃𝐞𝐯𝐒𝐞𝐜𝐎𝐩𝐬 & 𝐒𝐄𝐏 𝐄𝐧𝐟𝐨𝐫𝐜𝐞𝐦𝐞𝐧𝐭: Deployed enterprise tooling across product lines: SAST, DAST, fuzzing, secure SDLC controls, and automated checks built directly into development pipelines.

• 𝐒𝐞𝐧𝐢𝐨𝐫 𝐓𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐭 – 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 at Bosch
  Nov 2023 - Dec 2024 · 1 yr 2 mos

  As a 𝐒𝐞𝐧𝐢𝐨𝐫 𝐓𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐭, I led global cybersecurity programs that elevated enterprise 𝐫𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞, strengthened 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, and aligned 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 with business transformation. ✅ 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐜 𝐀𝐝𝐯𝐢𝐬𝐨𝐫𝐲 & 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Directed global security teams delivering enterprise-wide improvements in 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐨𝐬𝐭𝐮𝐫𝐞, 𝐫𝐢𝐬𝐤 𝐦𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, and 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐞𝐱𝐜𝐞𝐥𝐥𝐞𝐧𝐜𝐞. ✅ 𝐁𝐚𝐧𝐤𝐢𝐧𝐠 & 𝐅𝐢𝐧𝐭𝐞𝐜𝐡 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Implemented frameworks aligned with 𝐑𝐁𝐈, 𝐂𝐄𝐑𝐓-𝐈𝐧, 𝐒𝐄𝐁𝐈, and 𝐏𝐂𝐈-𝐃𝐒𝐒. Built mature 𝐒𝐎𝐂, 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, and 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 capabilities ✅ 𝐆𝐃𝐏𝐑 & 𝐆𝐥𝐨𝐛𝐚𝐥 𝐏𝐫𝐢𝐯𝐚𝐜𝐲: Executed 𝐆𝐃𝐏𝐑 programs including 𝐑𝐨𝐏𝐀, gap assessments, policy engineering, and compliance with Articles governing 𝐝𝐚𝐭𝐚 𝐫𝐢𝐠𝐡𝐭𝐬, 𝐥𝐚𝐰𝐟𝐮𝐥 𝐩𝐫𝐨𝐜𝐞𝐬𝐬𝐢𝐧𝐠, and 𝐜𝐫𝐨𝐬𝐬-𝐛𝐨𝐫𝐝𝐞𝐫 𝐭𝐫𝐚𝐧𝐬𝐟𝐞𝐫𝐬. ✅ 𝐏𝐫𝐢𝐯𝐚𝐜𝐲-𝐄𝐧𝐡𝐚𝐧𝐜𝐢𝐧𝐠 𝐓𝐞𝐜𝐡𝐧𝐨𝐥𝐨𝐠𝐢𝐞𝐬: Deployed 𝐃𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭𝐢𝐚𝐥 𝐏𝐫𝐢𝐯𝐚𝐜𝐲, 𝐇𝐨𝐦𝐨𝐦𝐨𝐫𝐩𝐡𝐢𝐜 𝐄𝐧𝐜𝐫𝐲𝐩𝐭𝐢𝐨𝐧, and 𝐅𝐞𝐝𝐞𝐫𝐚𝐭𝐞𝐝 𝐋𝐞𝐚𝐫𝐧𝐢𝐧𝐠, enabling secure and privacy-preserving analytics. ✅ 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 & 𝐅𝐨𝐫𝐞𝐧𝐬𝐢𝐜𝐬: Built 𝐈𝐑 𝐩𝐥𝐚𝐲𝐛𝐨𝐨𝐤𝐬, forensics readiness programs, and crisis workflows that cut containment time by 50%, minimizing business and operational impact. ✅ 𝐑𝐢𝐬𝐤 𝐌𝐢𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧: Achieved 40% vulnerability reduction through advanced 𝐭𝐡𝐫𝐞𝐚𝐭 𝐦𝐨𝐝𝐞𝐥𝐢𝐧𝐠, 𝐕𝐌 cycles, and enterprise-wide 𝐩𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐭𝐞𝐬𝐭𝐢𝐧𝐠. ✅ 𝐙𝐞𝐫𝐨-𝐓𝐫𝐮𝐬𝐭 𝐈𝐀𝐌: Engineered robust 𝐈𝐀𝐌 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, Zero-Trust-aligned access controls, and identity protections for hybrid and multi-cloud environments. ✅ 𝐆𝐑𝐂 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞: Strengthened enterprise 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, 𝐫𝐢𝐬𝐤, and 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞

• Bosch ()
  • 𝐇𝐞𝐚𝐝 𝐨𝐟 𝐆𝐥𝐨𝐛𝐚𝐥 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 𝐂𝐞𝐧𝐭𝐞𝐫 (𝐒𝐎𝐂)
    Jan 2023 - Jul 2023 · 7 mos

    As the 𝐇𝐞𝐚𝐝 𝐨𝐟 𝐆𝐥𝐨𝐛𝐚𝐥 𝐒𝐎𝐂, I led Bosch’s worldwide cyber defence operations, driving transformation across 𝐦𝐚𝐧𝐮𝐟𝐚𝐜𝐭𝐮𝐫𝐢𝐧𝐠, 𝐚𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞, 𝐜𝐥𝐨𝐮𝐝, 𝐎𝐓/𝐈𝐎𝐓, and 𝐞𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 IT environments. I delivered an intelligence-driven security model that elevated global SOC maturity, strengthened 𝐭𝐡𝐫𝐞𝐚𝐭 𝐝𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧, and enabled 𝐫𝐚𝐩𝐢𝐝 𝐫𝐞𝐬𝐩𝐨𝐧𝐬𝐞. My leadership integrated 𝐀𝐈/𝐌𝐋, 𝐋𝐋𝐌, and 𝐜𝐥𝐨𝐮𝐝-𝐧𝐚𝐭𝐢𝐯𝐞 capabilities to build a future-ready global defence ecosystem. ✅ 𝐆𝐥𝐨𝐛𝐚𝐥 𝟐𝟒×𝟕 𝐂𝐲𝐛𝐞𝐫𝐃𝐞𝐟𝐞𝐧𝐬𝐞: Directed internationally distributed SOCs ✅ 𝐒𝐎𝐂 𝐌𝐨𝐝𝐞𝐫𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧: Delivered next-gen 𝐒𝐈𝐄𝐌, 𝐒𝐎𝐀𝐑, and 𝐔𝐄𝐁𝐀, achieving 𝟑𝟎% efficiency uplift and 𝟒𝟎% enhanced threat detection. ✅ 𝐀𝐏𝐓 𝐃𝐞𝐟𝐞𝐧𝐬𝐞 𝐂𝐚𝐩𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬: Built advanced defence mechanisms against 𝐫𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞, 𝐳𝐞𝐫𝐨-𝐝𝐚𝐲 exploits, 𝐬𝐮𝐩𝐩𝐥𝐲-𝐜𝐡𝐚𝐢𝐧 attacks, and 𝐧𝐚𝐭𝐢𝐨𝐧-𝐬𝐭𝐚𝐭𝐞 𝐀𝐏𝐓𝐬. ✅ 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐂𝐨𝐦𝐦𝐚𝐧𝐝 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Executed high-severity IR operations delivering 𝟓𝟎% faster containment ✅ 𝐂𝐡𝐢𝐩-𝐭𝐨-𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Unified defence across 𝐞𝐦𝐛𝐞𝐝𝐝𝐞𝐝 controllers, 𝐚𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐄𝐂𝐔𝐬, 𝐎𝐓/𝐈𝐂𝐒, and 𝐦𝐮𝐥𝐭𝐢-𝐜𝐥𝐨𝐮𝐝 architectures. ✅ 𝐀𝐈/𝐌𝐋-𝐃𝐫𝐢𝐯𝐞𝐧 𝐒𝐄𝐂𝐎𝐏𝐒: Deployed 𝐀𝐍𝐍, 𝐂𝐍𝐍, 𝐑𝐍𝐍, 𝐓𝐫𝐚𝐧𝐬𝐟𝐨𝐫𝐦𝐞𝐫𝐬, and 𝐋𝐋𝐌-𝐞𝐧𝐡𝐚𝐧𝐜𝐞𝐝 SOC using 𝐑𝐀𝐆 pipelines for automated threat correlation. ✅ 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 𝐏𝐫𝐨𝐠𝐫𝐚𝐦: Established enterprise TI aligned with 𝐌𝐈𝐓𝐑𝐄 ATT&CK, enabling proactive detection and global intelligence sharing. ✅ 𝐁𝐂𝐏/𝐃𝐑 𝐌𝐚𝐬𝐭𝐞𝐫𝐲: Developed and executed 𝐜𝐲𝐛𝐞𝐫 𝐫𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞, 𝐃𝐑 frameworks, adversarial simulations, and multi-region cyber drills. ✅ 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 & 𝐅𝐨𝐫𝐞𝐧𝐬𝐢𝐜𝐬: Built 𝐈𝐑 𝐩𝐥𝐚𝐲𝐛𝐨𝐨𝐤𝐬, forensics readiness programs, and crisis workflows

  • 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 – 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐎𝐓
    Jan 2022 - Jan 2023 · 1 yr 1 mo

    Led high-impact cybersecurity programs protecting next-generation 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞-𝐃𝐞𝐟𝐢𝐧𝐞𝐝 𝐕𝐞𝐡𝐢𝐜𝐥𝐞𝐬 (𝐒𝐃𝐕𝐬), 𝐇𝐏𝐂𝐬, 𝐀𝐃𝐀𝐒, and critical 𝐎𝐓/𝐈𝐂𝐒 infrastructures. My leadership elevated Bosch’s engineering maturity, operational trust, and product security for global OEMs. ✅ 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Led ISO/SAE 21434, securing SDVs, HPCs, ADAS and connected platforms for global manufacturers. ✅ 𝐂𝐡𝐢𝐩-𝐭𝐨-𝐂𝐥𝐨𝐮𝐝 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞: Designed end-to-end Security Engineering Processes (SEP) ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲-𝐛𝐲-𝐃𝐞𝐬𝐢𝐠𝐧: Embedded secure SDLC, hardened CI/CD pipelines, and enforced secure coding, fuzzing, VA/PT ✅ 𝐒𝐲𝐬𝐭𝐞𝐦-𝐨𝐧-𝐂𝐡𝐢𝐩 (𝐒𝐨𝐂) 𝐌𝐚𝐬𝐭𝐞𝐫𝐲: Engineered secure compute subsystems using ARM CSS, Cortex-A/R/M, and TEE ✅ 𝐇𝐚𝐫𝐝𝐰𝐚𝐫𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐒𝐚𝐟𝐞𝐭𝐲: Implemented HSM, Secure Boot, key lifecycle management, tamper detection, ECC, safety islands, TrustZone and crypto acceleration ✅ 𝐀𝐔𝐓𝐎𝐒𝐀𝐑 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Integrated SecOC, CSM, HSM APIs, firewall controls, MCAL/HAL/BSW/RTE/ASW protections for hardened ECU environments ✅ 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐒𝐲𝐬𝐭𝐞𝐦 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧: Delivered secure diagnostics (OBD, UDS – ISO 14229-1), secured JTAG/Debug, encrypted filesystems, and replay-attack protection (RPBM) ✅ 𝐎𝐓 / 𝐈𝐂𝐒 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Secured ICS, SCADA, DCS, PLC using NIST SP 800-82 and ISA/IEC 62443. Strengthened OT visibility with Dragos and Claroty ✅ 𝐑𝐢𝐬𝐤 & 𝐓𝐡𝐫𝐞𝐚𝐭 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭: Delivered using STRIDE, PASTA, LINDDUN, CVSS modelling tools. ✅ 𝐑𝐞𝐠𝐮𝐥𝐚𝐭𝐨𝐫𝐲 𝐌𝐚𝐬𝐭𝐞𝐫𝐲: Ensured compliance with UNECE WP.29 R-155/156, SAE J3061, ISO 27001, TISAX, ISO 27403, ASPICE, ISO 26262 and ISO 21448 (SOTIF) ✅ 𝐒𝐞𝐜𝐮𝐫𝐞 𝐂𝐨𝐦𝐦𝐮𝐧𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬: Architected protected communication over CAN, FlexRay, LIN, Ethernet, SPI, UART, JTAG, MQTT, SSL/TLS, Wi-Fi, LTE/5G, GNSS and telematics

  • 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 – 𝐂𝐥𝐨𝐮𝐝 𝐚𝐧𝐝 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲
    Apr 2020 - Jan 2022 · 1 yr 10 mos

    Led enterprise-wide transformation across 𝐜𝐥𝐨𝐮𝐝, 𝐞𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐈𝐓, 𝐡𝐲𝐛𝐫𝐢𝐝 𝐞𝐧𝐯𝐢𝐫𝐨𝐧𝐦𝐞𝐧𝐭𝐬, and 𝐞𝐝𝐠𝐞 𝐞𝐜𝐨𝐬𝐲𝐬𝐭𝐞𝐦𝐬. I architected resilient security foundations, embedded 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲-𝐛𝐲-𝐃𝐞𝐬𝐢𝐠𝐧, modernized DevSecOps capabilities, strengthened Zero-Trust controls, and established globally aligned compliance frameworks. ✅ 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Led security initiatives across 𝐦𝐮𝐥𝐭𝐢-𝐜𝐥𝐨𝐮𝐝, 𝐡𝐲𝐛𝐫𝐢𝐝, and 𝐞𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 environments. ✅ 𝐂𝐡𝐢𝐩-𝐭𝐨-𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Implemented end-to-end 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐞𝐬 (𝐒𝐄𝐏) across hardware, application, identity, network, and cloud layers. ✅ 𝐃𝐞𝐯𝐒𝐞𝐜𝐎𝐩𝐬 𝐓𝐫𝐚𝐧𝐬𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧: Integrated 𝐒𝐀𝐒𝐓, 𝐃𝐀𝐒𝐓, 𝐒𝐂𝐀, 𝐈𝐚𝐂 𝐒𝐜𝐚𝐧𝐧𝐢𝐧𝐠, container security, and automated quality gates into 𝐃𝐨𝐜𝐤𝐞𝐫, 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬, and 𝐆𝐢𝐭𝐇𝐮𝐛 𝐀𝐜𝐭𝐢𝐨𝐧𝐬 pipelines. ✅ 𝐂𝐥𝐨𝐮𝐝 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 & 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞: Strengthened governance aligned with 𝐈𝐒𝐎 𝟐𝟕𝟎𝟎𝟏/𝟐𝟕𝟎𝟏𝟕, 𝐒𝐎𝐂 𝟐, 𝐍𝐈𝐒𝐓 𝐂𝐒𝐅, 𝐂𝐒𝐀 𝐂𝐂𝐌, and cloud benchmarks for 𝐀𝐖𝐒, 𝐀𝐳𝐮𝐫𝐞, 𝐆𝐂𝐏. ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 𝐄𝐱𝐜𝐞𝐥𝐥𝐞𝐧𝐜𝐞: Designed secure enterprise architectures with 𝐎𝐖𝐀𝐒𝐏, 𝐍𝐈𝐒𝐓, 𝐒𝐀𝐍𝐒, 𝐈𝐒𝐀𝐂𝐀 frameworks. ✅ 𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Expert in 𝐀𝐂𝐋𝐬, 𝐫𝐨𝐮𝐭𝐢𝐧𝐠, 𝐒𝐒𝐋/𝐓𝐋𝐒, 𝐓𝐂𝐏/𝐔𝐃𝐏, 𝐕𝐏𝐍𝐬, 𝐂𝐡𝐞𝐜𝐤𝐏𝐨𝐢𝐧𝐭 & 𝐅𝐢𝐫𝐞𝐰𝐚𝐥𝐥𝐬. ✅ 𝐓𝐡𝐫𝐞𝐚𝐭 𝐌𝐨𝐝𝐞𝐥𝐢𝐧𝐠 𝐌𝐚𝐬𝐭𝐞𝐫𝐲: Established enterprise threat-modelling using 𝐒𝐓𝐑𝐈𝐃𝐄, 𝐏𝐀𝐒𝐓𝐀, 𝐋𝐈𝐍𝐃𝐃𝐔𝐍, 𝐂𝐕𝐒𝐒, 𝐎𝐂𝐓𝐀𝐕𝐄, 𝐕𝐀𝐒𝐓, and 𝐡𝐓𝐌𝐌 frameworks. ✅ 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 & 𝐏𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: Led VA/PT, CIS benchmark & purple teaming ✅ 𝐓𝐨𝐨𝐥 𝐌𝐚𝐬𝐭𝐞𝐫𝐲: Deep expertise with 𝐍𝐞𝐬𝐬𝐮𝐬, 𝐍𝐦𝐚𝐩, 𝐁𝐮𝐫𝐩 𝐒𝐮𝐢𝐭𝐞, 𝐙𝐀𝐏, and cloud-native scanning suites

• 𝐃𝐢𝐫𝐞𝐜𝐭𝐨𝐫 (𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝐓𝐞𝐜𝐡𝐧𝐨𝐥𝐨𝐠𝐲 & 𝐒𝐲𝐬𝐭𝐞𝐦𝐬) at Government of India
  Jun 2017 - Jul 2019 · 2 yrs 2 mos

  As 𝐃𝐢𝐫𝐞𝐜𝐭𝐨𝐫 𝐨𝐟 𝐈𝐓 & 𝐒𝐲𝐬𝐭𝐞𝐦𝐬, I led digital transformation and cybersecurity programs, strengthening national security posture, operational superiority, and strategic resilience across complex distributed environments. ✅ 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞-𝐖𝐢𝐝𝐞 𝐂𝐲𝐛𝐞𝐫 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐲: Directed the Navy’s end-to-end 𝐈𝐓 & 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐬𝐭𝐫𝐚𝐭𝐞𝐠𝐲, building secure digital ecosystems for fleet operations, intelligence workflows, and mission systems. ✅ 𝐆𝐥𝐨𝐛𝐚𝐥 𝟐𝟒×𝟕 𝐒𝐎𝐂 𝐂𝐨𝐦𝐦𝐚𝐧𝐝: Led the Navy’s 𝐆𝐥𝐨𝐛𝐚𝐥 𝟐𝟒×𝟕 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 𝐂𝐞𝐧𝐭𝐞𝐫, strengthening real-time detection, monitoring, and incident response across defence networks. ✅ 𝐌𝐢𝐥𝐢𝐭𝐚𝐫𝐲-𝐆𝐫𝐚𝐝𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐬: Deployed advanced 𝐈𝐃𝐒/𝐈𝐏𝐒, secure segmentation, anti-malware frameworks, and vulnerability scanning, significantly enhancing cyber readiness. ✅ 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 𝐅𝐮𝐧𝐜𝐭𝐢𝐨𝐧: Established the 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 capability, enabling predictive defence against evolving threat vectors. ✅ 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞: Developed and enforced 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬, 𝐬𝐭𝐚𝐧𝐝𝐚𝐫𝐝𝐬 & 𝐒𝐎𝐏𝐬, aligned with national cybersecurity directives. ✅ 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐂𝐨𝐦𝐦𝐚𝐧𝐝: Led high-severity cyber investigations, building Navy-wide 𝐈𝐑 𝐩𝐥𝐚𝐲𝐛𝐨𝐨𝐤𝐬, escalation frameworks, and breach-handling procedures. ✅ 𝐍𝐎𝐂/𝐒𝐎𝐂 𝐌𝐨𝐝𝐞𝐫𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧: Upgraded infrastructure with next-gen monitoring tools, 𝐚𝐧𝐭𝐢-𝐦𝐚𝐥𝐰𝐚𝐫𝐞, and vulnerability management systems. ✅ 𝐈𝐒𝐎 𝟐𝟕𝟎𝟎𝟏 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩: Spearheaded Navy-wide 𝐈𝐒𝐎 𝟐𝟕𝟎𝟎𝟏 𝐈𝐒𝐌𝐒 training, audits, and certification, elevating governance maturity.