Baik Acharya Email & Phone Number

United States

New York, United States

Lead the development and implementation of robust information security policies and procedures, ensuring compliance with HIPAA, HITRUST, NIST, and other relevant industry standards. Managed GRC initiatives, including the development and maintenance of risk management frameworks, ensuring alignment with organizational risk appetite and regulatory requirements. Spearheaded Data Governance efforts, implementing policies and controls to ensure data integrity, availability, and confidentiality across the organization. Conduct and manage regular security assessments, vulnerability scans, and penetration tests to proactively identify and mitigate potential risks and threats. Oversee security incidents and breaches, managing all aspects from investigation and containment to resolution, with a focus on minimizing impact and preventing recurrence. Collaborate closely with cross-functional teams, including IT, development, and legal, to embed security controls throughout the systems and application development lifecycle. Act as a key member of the Risk Management Governance Committee, contributing to the development and maintenance of the Risk Register, and ensuring alignment with organizational risk appetite. Perform third-party risk assessments, application risk assessments, and supply-chain risk analyses, providing actionable recommendations to support informed decision-making and enhance security posture.

United States

Managed the information security function, including SOC, threat intelligence, and vulnerability management, while ensuring the protection of critical business assets across a complex cloud-based infrastructure. Directed incident response teams and provided timely guidance during major cyber incidents, limiting impact to business operations and maintaining 99.9% uptime. Conducted risk assessments and compliance audits, maintaining adherence to NIST, GDPR, PCI and CCPA requirements. Led vendor risk management initiatives, negotiating contracts and ensuring third-party services met security and privacy standards. Implemented multi-factor authentication (MFA) and enhanced endpoint detection and response (EDR), reducing potential threat vectors by 35%. Led vendor risk management initiatives, negotiating contracts and ensuring third-party services met security and privacy standards. Developed and delivered security awareness training programs, empowering employees to recognize and respond to potential security risks. Provided technical and functional guidance to security analysts, engineers and IT staff on network security best practices and threat landscapes.

Brooklyn

Provided expert advice on security best practices, assisting clients in achieving compliance with industry standards. Conducted comprehensive security audits and assessments, identifying gaps and recommending strategies for improvement. Developed customized security policies and procedures for clients, tailored to their specific needs and regulatory requirements. Implemented multi-factor authentication (MFA) and enhanced endpoint detection and response (EDR), reducing potential threat vectors by 35%.

Proficiency in Cisco Routers; Cisco Catalyst Switches; Cisco Nexus; load balancers; Wireshark, VMWare, DELL EMC. Member of an engineering team responsible for the design, implementation, deployment and escalation support services to major clients of DC&M using leading-edge networking and infrastructure technology. Specific responsibilities included setup/configuration, deployment, monitoring, analysis, change request, escalation support and documentation for various LAN/WAN network enterprise infrastructures.

Cyber Security

Computer Engineering, A

Computer Engineering

High School, Physical Sciences