Dr. Pawan Chawla

With over 25 years of extensive experience across companies of varying sizes, spanning micro-businesses to large multinational corporations, I have built a robust career in diverse sectors such as Banking, Financial Services, Insurance (BFSI), FMCG, Business Process Outsourcing, E-Commerce, and Business & Technology Consulting.My expertise centers on enterprise security architecture and operations, with a specialized focus on driving Business Key Performance Indicators (KPIs) and leveraging Information Technology and Enterprise Application Software strategically to foster business growth.Recognized for my strong leadership, communication, and analytical skills, I have successfully led teams in implementing cost-saving initiatives, deploying effective tools, and enhancing customer satisfaction metrics.Key highlights of my experience include proficiency in Business GAP analysis, Business Process Analysis, Process Design/Redesign, Risk Analysis, Change Management, and extensive knowledge of domain and technology integration.Key Areas of Expertise:Targeted Security Technology Solutions: Designing and implementing solutions that tackle core business challenges and position organizations for profitability through technological advancements.Security Team Leadership: Building and managing high-performance teams, fostering a culture of trust, and empowering innovation among team members.Technical Expertise:Proficient in identifying and mitigating network, web, thick client, and mobile application vulnerabilities through comprehensive static and dynamic security assessments.Skilled in conducting Penetration Testing (Application, Network, and Server-level attacks), utilizing exploitation techniques and frameworks like Metasploit, Kit-sploit, and web-sploit for assessment and post-exploitation activities.Sound understanding of Common Vulnerability Scoring System (CVSS) versions 2.0 and 3.0, enabling effective severity assessment and understanding of business impact.Compliance Knowledge:Regulatory Compliance: Expertise in Risk Management standards (ISO 31000), ISO 27001:2013, NIST SP 800-53, PCI DSS v3.2, COBIT, HIPAA, and SOX.Statutory Compliance: Familiarity with regulatory frameworks such as Indian IT Act 2000, RBI’s Cyber Security Framework for BFSI/NBFC, IRDA’s Cyber Security Framework, and GDPR Framework.