Mayank Thakar Email & Phone Number

United Arab Emirates

Dubai, United Arab Emirates

As Global Information Security Officer (GISO) in senior executive role am responsible for:Cybersecurity Leadership: Developing and leading cybersecurity strategy and culture.Risk Management: Identifying and mitigating cybersecurity risks.Security Policy & Compliance: Ensuring compliance with regulations and setting security policies.Incident Response: Managing security incidents and recovery.Security Technology: Overseeing security tools and architecture, Migration from… Show more As Global Information Security Officer (GISO) in senior executive role am responsible for:Cybersecurity Leadership: Developing and leading cybersecurity strategy and culture.Risk Management: Identifying and mitigating cybersecurity risks.Security Policy & Compliance: Ensuring compliance with regulations and setting security policies.Incident Response: Managing security incidents and recovery.Security Technology: Overseeing security tools and architecture, Migration from legacy technology platform to Cloud native platformTraining & Awareness: Educating employees on cybersecurity.Vendor Risk Management: Assessing third-party security risks.Budget Management: Allocating resources and justifying security investments.Audits & Assessments: Regularly evaluating and improving security.Reporting & Communication: Providing updates to senior management and the board.Continuous Improvement: Staying current with threats and trends.Legal & Regulatory Liaison: Managing legal and compliance aspects.Crisis Management: Leading responses during cybersecurity crises.Privacy Protection: Establishing data protection programBoard Engagement: Engaging with the board on cybersecurity strategy and ROI Show less

Dubai, United Arab Emirates

• Investigate & triage alarms raised by L1 remote team and qualify an alarm into incident if required• Assign severity to the incidents, invoke incident response and ensure closure of incident• Design incident response procedures/ playbooks, continuously fine tune SIEM use cases with lessons learned Design SOC KPIs, weekly & monthly management presentations• Design threat hunting hypothesis, set scope and ensure successful completion of the hunt• Monitor cyber threats and take… Show more • Investigate & triage alarms raised by L1 remote team and qualify an alarm into incident if required• Assign severity to the incidents, invoke incident response and ensure closure of incident• Design incident response procedures/ playbooks, continuously fine tune SIEM use cases with lessons learned Design SOC KPIs, weekly & monthly management presentations• Design threat hunting hypothesis, set scope and ensure successful completion of the hunt• Monitor cyber threats and take preventive measures by rolling out relevant advisories & sharing IOCs• Skills/ Tools of trade: LogRyhtm, RSA Netwitness, MITRE ATT&CK Framework, NIST CSF, NIST800-61, Microsoft Windows Forensics, Anyrun.io, Hybrid Analysis, Virus Total, Alien Vault, DESCAdvisories, MISP, Firewall, IDS, Proxy, DNS, AV, IIS, Apache Log Formats, Threat Hunting on ADspecific attacks and defenses, OWASP Show less

• Spearheading Vulnerability Management Program and IT Infrastructure security baselining enterprisewide• Ensure that cyber security policies and procedures are communicated to all personnel and that compliance is enforced• Ensure compliance with the changing laws and applicable regulations, translate that knowledge to identification of risks and actionable plans to protect the enterprise crown jewels• Understand and interact with related disciplines through committees to ensure the… Show more • Spearheading Vulnerability Management Program and IT Infrastructure security baselining enterprisewide• Ensure that cyber security policies and procedures are communicated to all personnel and that compliance is enforced• Ensure compliance with the changing laws and applicable regulations, translate that knowledge to identification of risks and actionable plans to protect the enterprise crown jewels• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services• Oversee identity and access management. Also implemented Privileged Access Management solution enterprise-wide• Provide training and mentoring to security team members• Skills/ Tools of trade: Nessus Security Center, Nessus Agents, CIS Benchmarks, Microsoft Security Compliance Toolkit, YARA Rules, Github, Oracle Database Security Assessment Tool, Open Security Architecture, Cyber security control testing, Internal/ External IT Security Audit Liaison, OWASP, CVSS,Beyond Trust PAM solution Show less

Dubai, Uae

• As part of the IT Security GRC team at a prominent UAE based airlines carried out group wide ISR (Dubai Information Security Regulation) gap assessment program.• Ensure that disaster recovery and business continuity plans are in place and tested• Review security policies, controls and cyber incident response planning• Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities• Designed information… Show more • As part of the IT Security GRC team at a prominent UAE based airlines carried out group wide ISR (Dubai Information Security Regulation) gap assessment program.• Ensure that disaster recovery and business continuity plans are in place and tested• Review security policies, controls and cyber incident response planning• Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities• Designed information security KPIs to measure Information Security policies and standards compliance in various enterprise wide department outside of IT• Communicate best practices and risks to all parts of the business, outside IT Ensure compliance with the changing laws and applicable regulations• Spearheaded Vulnerability Management Program and IT Infrastructure baselining for enterprise wide.• Skills/ Tools of trade: Nessus Scanner Professional, CIS Benchmarks, Microsoft Security Compliance Toolkit, Oracle Database Security Assessment Tool, Open Security Architecture, Cyber security control testing, Internal/ External IT Security Audit Liaison, OWASP, CVSS, NIST CSF, ISO27001 Standards,Procedures, Guidelines, Asset based risk assessment. Show less

Mumbai Area, India

• Develop audit work programs to offer comprehensive audit coverage as well as defined set of IT controls to evaluate the control design/implementation effectiveness for various IT technologies,applications and projects. Ensure that documentation relating to Working Papers and in support of audit findings is recorded / archived appropriately for future reference• Plan, organize and execute reviews in areas including, but not limited to: IT infrastructure; architecture;application systems… Show more • Develop audit work programs to offer comprehensive audit coverage as well as defined set of IT controls to evaluate the control design/implementation effectiveness for various IT technologies,applications and projects. Ensure that documentation relating to Working Papers and in support of audit findings is recorded / archived appropriately for future reference• Plan, organize and execute reviews in areas including, but not limited to: IT infrastructure; architecture;application systems, IT projects; information/cybersecurity (e.g. network, operating system, cloud,database, security incident response); disaster contingency planning; and IT processes in order to ensure that information system risks are identified and managed in an effective manner• Analyze and keep up-to-date the risk profiles of IT areas so as to identify the priority areas and recommend them to Internal Audit management for prioritization. This involved on-going liaison with IT Managers and Business Unit Managers regarding the status of these IT areas• Draft the audit report, follow up on responses and ensure appropriate action is taken to implement agreed audit recommendations• Skills/ Tools of trade: End to end liaison for SOC type 2 audit, Client specific compliance audits, ISO27001,PCI DSS v2 control implementer & external certification liaison, Technology Risk Assessment, OpenSecurity Architecture, Third Party IT Security Auditor, Security Awareness Trainer Show less

Mumbai Area, India

Technical Risk AdvisoryVulnerability AssessmentISMS Internal AuditsPre-Client Visit Compliance Audits

Lead Coordinator - ISO 27001 Coordinator - PCI DSS v1.2Coordinator - BCPInternal AuditsVulnerability Assesment using toolsRisk Assesment

Master Of Technology - Mtech, Artificial Intelligence & Machine Learning

The BITS WILP Master of Technology (M.Tech.) in AI & ML program is typically structured as a two-year course. Over this duration, students.

Bis (Hons) - Information Systems, Information Technology

Activities and Societies: Event mangement Bachelor of Information Systems (BIS) is a four-year undergraduate program offered by Guru.

12Th Cbse Board, Pcm And Computer Science

Activities and Societies: Sport

10Th Cbse Board, Cbse 10Th Curriculum

Activities and Societies: Sport, Science Exhibition