Rajesh Vaidya Email & Phone Number

New York, New York, Us

• Influence information security strategy that is intel-led and aligned with business strategy delivering best in class security capabilities to accelerate progressive cyber agenda. • Lead CyberDefense program that significantly advanced cyber defense capabilities of the flagship applications by leveraging leading technologies such as Web Application Firewalls, DDoS Protection, Runtime Application Self Protection (RASP), DevSecOps, Attack Surface Management, BOT protection, Behavioral Biometrics, API/Microservices Protection, Online Fraud Detection/Protection, and Network Segmentation. • I am accountable for Security architecture assessments for applications, and emerging technologies like Cloud/SaaS (AWS, Snowflake, etc), Blockchain, AI/ML, Robotics Process Automation, and API/Microservices. • I championed the CyberDefense maturity model which measures the maturity of controls across different lines of business and enables CIOs to attain the highest level of cyber maturity. • Create threat modeling and security architecture, and compliance risk assessment methodologies for emerging areas like Blockchain/DLT, Generative AI, Robotics Process Automation, API/Microservices, and cloud.Global Security program management including, Applications (On-Prem, SaaS) Security Architecture Risk assessment, DevSecOps, Payment Systems Risk Assessment, Regulatory Compliance, and Cyber Community for AppDev. • I led key security product and process improvement initiatives like Threat Modelling tool to automate architecture risk assessment for hundreds of applications, and a comprehensive consolidated regulatory IS compliance assessment framework mapping to NIST.• Leadership in Security Architecture Committees, Multiple Risk Management Committees, Emerging Technology Center of Excellence, Information Security Policy WGs, and Cyber Innovation Center Committees.• Lead a global team of Security Architects, Security Analysts, and Technology Program Managers.

New York, New York, Us

Accomplishments for the expanded portfolio as below• As a principal ISO, I led application security architecture, threat modeling, risk, and compliance assessments for global business applications developed internally as well as SaaS running on Prem legacy, On-Prem Private Cloud, and Public Cloud (AWS, Snowflake) for all businesses in Institution Client Group (ICG).• Technical program management for programs such as Secure SDLC/DevSecOps, IAM, KMS, Data Protection including GDPR, and Third Party Information Security to drive risk reduction by engaging senior stakeholders in Technology, CISO, Cyber Security Fusion Center, and SecOps.• Drive regulatory assessments such as SWIFT CSP, CHAPs, Fedwire, and Target2 for Payment Systems • Drive improvements for ongoing InfoSec risk & control assessments and disseminate information to Senior InfoSec officers across different sectors• Internal assessment and liaison with external agencies in various regulatory as well as Industry compliance exercises for FISMA, FFIEC, ISO, PCI-DSS, and MAS compliance• Re-engineered global Information Security assessment process with tangible efficiency and effectiveness improvements that were adopted Citi-wide.• Setup Intel-led information security assessment approach and proactively advised internal clients on improving existing security controls as well as adding new ones to mitigate the risk.• Define and enhance KPI/KRI for IS programs, develop operational dashboards, and monitor progress to manage performance within target KPI/KRIs.• Support businesses with client engagements during pre-sales and routine information security assessments. • Influence development of Citi Global IS Standards based on emerging technology, evolving threat, and regulatory landscape. Advocate Citi IS standards to Sr. leadership in technology, CISO, Cyber Security Fusion Center, and security operations• Manage global talent comprising InfoSec Officers, Security Architects, and Security Analysts

New York, New York, Us

• Information Security assessments for franchise critical business applications (100+) and infrastructure for the different businesses such as cash, payment & receivables, liquidity management, commercial cards, etc.• Improve information security controls for applications, and infrastructure for global regulatory, and industry requirements like FFIEC, CSA, NIST, PCI-DSS, MAS, etc.• Support business during both internal and external audit• Advise Sr. technology and business leaders to improve security controls, monitor and manage risks within the Citi KPI tolerance • Support business to demonstrate information security controls design and operating effectiveness during new deals as well as retain existing business.

I was responsible for Pre-sales, and delivery of a broad portfolio of security services such as Managed Security, and Consulting services around technology from leading industry players like Computer Associates, Cisco, Novell, and IBM. Security consulting services offered Information Security assessments, IT Security Audit, Identity Access Management, Compliance, and Security Event Information Management (SIEM). I led a global team of engineering and operations to operate a 24X7 Managed Security Operations portfolio covering major firewalls, IPS, host IPS, VPN, server, email gateway, and anti-virus platforms for SMB customers.Managed a global team of up to 60 Security Consultants, Security Engineers, Security Analysts, and Program ManagersSecurity consulting • SIEM and Log Management (PCI-DSS , SOX) solution for large Insurance in the Northeast• Identity Management (Web SSO and User Provisioning) for Logistics company for McDonald's in Midwest• Content Development for SIEM Product Vendors in North America• Security Operations Center as Build, Operate, Transfer for Service Provider in Mexico• Migrated Security Operations Center (SOC) platform from IBM to CA technology for a large financial institute on West Coast.• CA eTrust based enterprise access control solution to satisfy SOX requirements for a large mortgage lender in Virginia• Architected and implemented a solution for PCI-DSS compliance that meets specific requirements in the area of critical data access and privileged user authentication-related auditing for a large retailer on the West Coast.• Projects in Penetration Testing, Vulnerability Assessment, and Network Security in North AmericasManaged Security Services• 24x7 Managed Security Operations and Compliance services portfolio covering network security firewalls, IPS, email gateway, and anti-virus platforms for SMB customers. • Launched new network protection services around Cisco Network Admission Control products.

Brookhaven, Mississippi, Us

Leader SIM/SEM space which earned key awards (1st TechRanking by Forrester) and doubled revenues and customers. I was successful in creating a product platform on which a suite of add-on products were offered to generate new as well as repeat business with a very small team and limited budget. netForensics had over 200 customers in various industry verticals like financial institutions, healthcare, state, federal agencies, MSPs across the world. • Led Pre-Sales for over 100 opportunities from the inception of the company • Architected, and managed large scale deployment of SIEM for many key accounts in NYC Financials, Federal, State Agencies, Retail, MSPs.• Trained system engineering as well as consultants in post-sales delivery teams.• As product management responsibilities, launched key product offerings like risk assessment, regulatory compliance (SOX, HIPAA, GLBA, FISMA), security event correlation, Vulnerability management, incident resolution, and device adapters for technologies like application security, perimeter security, intrusion detection, host security, etc.• First one to integrate database monitoring product into netForensics to monitor activities for Enterprise applications.• Built security lab with security products like Firewall, NIDS, HIDS/HIPS, AV, Wireless, etc. for interoperability lab from various vendors like Cisco, Checkpoint, Juniper/Netscreen, ISS, HP, etc.• Direct involvement for various phases of products from requirements gathering, prioritization, definition, pricing, product release tracking among different engineering groups, beta till launch (Adopted CMM methodology to suit company profile). Effective in quick to market strategies• Led system engineering functions like installation, configuration, demonstration, RFP/RFI responses, and bakeoff/pilot projects during the initial stages of the company.

In

• Architected and Implemented many enterprise systems (application and resource monitoring, event management, help desk, storage management) and network management solutions around the Computer Associates Unicenter product suite. Trained and successfully transitioned project to IT operations team after implementations.• Responsible for project planning and deployment strategies for the above projects• Preparation and presentation of the business case and project plan to customers• Trained, and mentored consultants on Computer Associates products and project management aspects driving client satisfaction and profitability objectives • Generated over three quarter million revenue in individual billing

Armonk, New York, Ny, Us

Clientele - Standard Charted Bank, Indian Airlines, Bharat Electrical Heavy Limited, Ahmedabad Stock Exchange• Designed and Implemented many LAN/WAN solutions using IBM’s networking gear• Designed and Implemented enterprise system (storage management, software distribution, asset management, remote management) and network management solutions around IBM’s networking and Netfinity product suite• Responsible for project planning and deployment for the above projects

• Commissioning and configuring and of Private Packet Switched Data network (X.25) for client-server application LAN to LAN connectivity using routers, LAN bridges over high-speed data links implemented.• Installing, commissioning and maintaining of the central hub, outstations and repeaters for 2GHz Band TDMA Digital Microwave System.• 2Mbps Fiber Optic system, ABB & Siemens Fiber cable splicing & jointing, providing voice and data applications mentioned above.• Trunking radio (VHF) system, Motorola System engineering, installing and commissioning of base stations (138- 174MHz), antennae system & full duplex car mobile sets. This system was also interfaced with PABX system and low band VHF (66-74 MHz) system. • Switching systems - Digital Exchanges Commissioning, maintenance & programming of medium to high end telecom switches of OKI, CDOT technology.