Deepu Krishna Email & Phone Number

LEADER in Information & Cyber Security, Cloud, Artificial intelligence AI - Security, Risk & Governance, having 15 Years (21 years) experience with FINANCIAL INSTITUTIONS (G-SIFIs). Experience encompasses Security domains of Cyber, Cloud, Application, Infrastructure, Artificial intelligence (AI), Cyber & Technology Resilience, Business Continuity, Third Party, Data Management, Network and Regulatory Engagement. Possess excellent communication to work in concert with diverse cross functional teams and INFLUENCE Technology decisions in Organization. Directed, Transformed and Implemented ISMS-Information Security Management System - improved the security posture of Organizations IT Infra and Cloud SaaS/ PaaS / IaaS Services. Led, Designed, Delivered the Cyber Security Vision and Strategy including Product and Infrastructure. Maintained Regulatory Compliance including Certification such as ISO 27001, 27017, 2018 and SOC 2.  Developed Information Security and Enterprise Risk Management Policy aligned to Industry framework.  Over 8 years of experience in Cloud (AWS, Azure) Security, Risk and Governance, 15 years in Cyber & Information Security, Resilience and Technology Risk, 8 years with major Banks (Credit Suisse, PNC Bank, Bank of New York Mellon, and Barclays Bank Plc). Built information security roadmap, for the Portfolio of Cloud SaaS, Applications and service offering.  Managed Cyber Security domains of Data Security, Vulnerability & Threat Management, Incident Management, SOC (Security Operations), Identity and Access Management, Application - SDLC and Product Security, BCP / DR, addressing Regulatory Requirements, Control Assurance and Supply Chain (Third Party) Security. Led, Managed and Mentored Security Engineers and Cyber Security Consultants in Risk, e2e Security Operations, DevSecOps (CI/CD – IaC), IAM, DR/BCP. Managed Cloud Security stack - IAC (Infrastructure as Code), PAC (Policy as Code), CSPM (Cloud Security Posture Management), CWP (Cloud Workload Protection), CIEM (Cloud Infrastructure Entitlement Management), CNAAP, Cloud Data Security - Posture-Management, Cloud Detection and Response, API Security and Cloud Compliance. Managed Application Security (Secure Design, Secure Coding, CI/CD, Runtime Defense and Monitoring), including Shift Left and Right strategy and applying Security Controls using OWASP ASVS (Application Security Verification Standard). Managed Security, Privacy, Governance and Risk Management for Artificial Intelligence Applications, adhering to various regulations.