Bio

A highly experienced security leader with successful track record of enabling secure cloud migrations, identity, and application security transformations, setting up architecture, engineering, and innovation functions for fortune 50 financial services, insurance, and healthcare organizations. Delivered an average reduction of $10-12M in security operating budget by replacing expensive managed security services with home grown solutions, rationalizing overlapping stack and developing in-house talent. A unique blend of equal depth in technology and business at executive leadership level and highly sought after thought leader by several boards, councils and electronic media houses like Forbes, The Economist and New Jersey Institute of Technology. Leadership: Strategizing (technology and business exploitation), scanning (technology and business exploration), executing (enabling efficiency), building high performing cohesive teams, executive and board level updates, strong negotiation skills with business and technology groups, building consensus among stakeholders, managing matrix and virtual teams, setting up a data driven decisioning culture, ambassador of inclusion and diversity, customer, and partner relationship management, Security Specialties: Establish, maintain and drive adoption of security policy and strategies, cloud, container and serverless security, application and data security, software development life cycle and DevSecOps, network, endpoint and mobile security, identity and access management, security monitoring and alerting, security automation and orchestration, pen test, red teaming, e-discovery, threat and vulnerability management, incident and risk management, security metrics management, regulatory compliance (HIPAA, PCI-DSS, NYDFS, GDPR, SOC1/2) , frameworks (NIST, ISO/IEC 27002, MITRE, HITRUST), playbook and tabletop, cloud security technologies in AWS, Azure, GCP, cloud security concepts like CASB, CSPM, CWPP, CIEM, SIEM, DSPM, CNAPP, DLP, 3rd party security, Secure web gateway, Proxy, FW/IPS, WAF, Web isolation, IAST, RASP. Industry Engagement: Founder of cloud security practitioner groups, co-chair of security chapters, industry, and academia partnerships, speaking engagements and editorial contributions, driving standards and frameworks, technology and customer board memberships, technology patents, open-source development. I have a master's degree in Technology Management from Columbia University, a bachelors from NIT Rourkela and an executive education from Wharton Business School.