IBM

Currently with Corporate Information Security Office, serving multiple global roles with a objective to meet IBM Enterprise security, regulatory and risk objectives globally. • Lead Global Cyber Security Risk Management across IBM, oversee the comprehensive risk identification and assessments and assess 500+ risks annually on networks, servers, applications, middleware, containers, repositories, third-party tools across the globe. • After risk identification, partner with involved stakeholders driving mitigation strategies, leading audits and investigations, and strengthening IBM’s compliance culture and governance. • Provide oversight for incident response programs, including SOC readiness and collaboration, tabletop drills, escalation management, and risk closure. • Conducted and led global internal (compliance and application) audits, audit readiness, supplier security risk assessments, cybersecurity assessments against ISO 27001, SOX, GDPR, IT Controls Framework (COSO) and client-specific contractual requirements. • Guided adoption of Zero Trust principles, DevSecOps practices, and cloud-native security controls (AWS, Azure, GCP) for global client engagements. • Lead IBM’s GDPR compliance program (India), covering contracts, TOMs, client engagements, and vendor ecosystems (as Data Processor and Controller). • Drove IBM’s Data Security & Privacy (DS&P) program across 1,600+ projects in India, establishing frameworks, reusable assets, and audit-readiness. • Advised Sr. Leadership on enterprise risk posture, cyber resilience, and investment priorities. • Partnered with procurement, finance, and service delivery leaders to manage security budgets and optimise ROI from compliance and risk initiatives.