Bio

I lead Navan's Security & Trust Org which is responsible for Product & Platform Security, Detection & Response, GRC, Enterprise Sec and Security Architecture & Engineering. My org's core mission is to ensure Navan meets its security&privacy obligations to its customers, investors, regulators and employees. I am a Senior security leader with 16+ years of leading global, cross-functional teams across hyper-growth startups, fortune 100 and big 4 consulting firms. I am active in the security community and advice startups on product & business strategy, market positioning and to solve security and business problems at scale. I have an entrepreneurial mindset and excel at prioritizing the needs of the customer and eliminating the friction caused by security tools and processes while formulating scalable, pragmatic security strategies to enable and safeguard the business. Past: - Served as a security leader at Adobe for 9+ years where my org drove several initiatives to level up security as Adobe reinvented itself in the cloud to grow from $30B to $300B business - Architect of Adobe common Controls Framework. Championed the implementation of CCF across all Adobe cloud products, services, platforms and operations. CCF became the backbone of Adobe’s security & trust strategy, opened up global GTM opportunities and enabled Adobe to achieve compliance with various worldwide cloud security and privacy certifications - Built a SWAT team of secops engineers & security TPMs to enforce security & ops best practices at scale for product & multi cloud via a companywide repeatable program through automation - Global leadership role. Built a team of leaders who embraced an agile mindset, and deeply engaged with 500+ product teams to ensure controls are baked into the product and feature development roadmaps Specialties: - Communication - Connect, Convey, Persuade & Influence all levels (C-Level to IC, both technical & non- technical) - Leadership - Operational excellence, Security strategy, Org design, Budgeting, Risk assessments, Roadmap planning, Messaging, Board reporting - Executive Skills - People focused, Solid talent pipeline, retain and motivate high performing talent, Build talent dense Org's, Customer focused - Domains - App sec, Cloud sec, Product sec, DevSecOps, Detection, Incident Response, Threat & Vul management, GRC, Enterprise Sec, Privacy, Trust & Physical sec - Technical - AWS, Azure, GCP, Kubernetes, Containers/Microservices Architecture, CSPM, CWPP, CIEM, SAST, DAST, SCA, SOAR, UBA, EDR, MSSP, NIST CSF, FAIR, ISO 27005, CMMI, COSO, COBIT.