Ritwik Datta Email & Phone Number

Gurugram, Haryana, India

Currently leading the Information Security team of 2nd Largest Public Sector Bank of India with more than 11 years of experience in Banking and Financial sector as Information Technology Security professional and also led multiple projects to completion.Key Roles and Responsibilities:• Formulated and implemented Cyber Security and Information Security Policies, Standards, Guidelines and Procedures as per the needs of the organization and best practices.• Brainstormed and… Show more Currently leading the Information Security team of 2nd Largest Public Sector Bank of India with more than 11 years of experience in Banking and Financial sector as Information Technology Security professional and also led multiple projects to completion.Key Roles and Responsibilities:• Formulated and implemented Cyber Security and Information Security Policies, Standards, Guidelines and Procedures as per the needs of the organization and best practices.• Brainstormed and developed strategies of Information Security and Cyber Security with Auditors and vendors to achieve InfoSec objectives of my current organization to make the cyber security posture secure and robust.• Scanning internal networks, applications through licensed scanning tools and rectifying vulnerabilities as soon as discovered.• Vulnerability assessment, Penetration testing, Process review, gap analysis.• Coordinate and collaborate with internal teams to ensure timely resolution of security issues.• Empaneling Information Security Audit firms through limited tender, open tender / Request for Proposal process.• Successfully guided, led and completed multiple IT projects and open tender processes.• Highly skilled at the process of selecting and securing services of vendors at optimal contract amount.• Provided strong leadership to enhance team productivity and morale. Currently managing IS Audit team of 12+ members.• Implementing security best practices.• Incident investigation (for cyber incidents), reviewing the incident modus operandi, conducting root cause analysis.• Project planning and implementation for Cyber Security related projects. Show less

Kolkata

Worked as Manager, Information Technology (I.T.), in erstwhile United Bank of India (now- Punjab National Bank), a premier Public Sector Bank of India, in Information Technology, Banking Risk Department and Finance Department.• Was made part of Banks project management team handling major changes and new projects.• Led two major projects of the Bank and started working with big consultancy firms and reported directly to top management. i) Centralization of Income Tax… Show more Worked as Manager, Information Technology (I.T.), in erstwhile United Bank of India (now- Punjab National Bank), a premier Public Sector Bank of India, in Information Technology, Banking Risk Department and Finance Department.• Was made part of Banks project management team handling major changes and new projects.• Led two major projects of the Bank and started working with big consultancy firms and reported directly to top management. i) Centralization of Income Tax return filing software in year 2015 ii) Implementation of centralized GST application and in year 2017• Conducting Cyber Security Audit for the bank’s IT infrastructure (including Servers, Network, Databases, Security Solutions), Payment Systems and Business Applications, (e.g. CBS, Treasury Management Software, Digital Products), Enterprise Applications. Third Party Risk Assessment.• Conducting IS Audit for Banks DC DR SOC NOC. • Conducting Risk based Internal Audit (RBIA) for bank’s internal IT processes and procedures, BCP DR operations, compliance with organizational policies, industry standards and regulatory guidelines.• Implementing ISMS in the bank and getting ISO 27001 certification for SOC, NOC, DC and DR sites. Handling Certification and Surveillance Audit.• Conducting Vulnerability Assessment and Penetration Testing analysis, Application Security Testing take part in Red Team exercise for the Bank together with the selected vendor.• Gained hands on experience in scanning tools. e.g. nmap, Nessus• Evaluation of Internal security requirements, provide recommendation to the Executive(s), ensuring smooth implementation of new tools and technologies.• Leading Teams managing Enterprise-Wide Security Solutions (e.g., SIEM, WAF, DLP, IPS, Firewall etc.). Show less

Kolkata

Joined as Officer, Information Technology (I.T.), in erstwhile United Bank of India (now- Punjab National Bank), a premier Public Sector Bank of India, in Information Technology and Banking Risk Department.• Worked with all stakeholders to help define and drive the execution of Information Security Policy and Cyber Security Policy including Cyber Crisis Management Plan.• Implementing and managing different Enterprise-wide Security Solutions (e.g., SIEM, WAF, DLP, IPS, Firewall… Show more Joined as Officer, Information Technology (I.T.), in erstwhile United Bank of India (now- Punjab National Bank), a premier Public Sector Bank of India, in Information Technology and Banking Risk Department.• Worked with all stakeholders to help define and drive the execution of Information Security Policy and Cyber Security Policy including Cyber Crisis Management Plan.• Implementing and managing different Enterprise-wide Security Solutions (e.g., SIEM, WAF, DLP, IPS, Firewall, Proxy Solution etc.)• Assisting SOC operations (HPE), Incident handling reporting and root cause analysis. Prepare Incident Dashboards.• Threat Modelling, periodic assessment of Security Solutions, Rule Review for SIEM, Firewall, DLP.• Regulatory reporting pertaining to IT and Information Security. Threat Intelligence Monitoring. • Implementation of controls as advised by regulatory and statutory bodies (e.g., RBI, NCCIPC, Cert-IN etc.)• Preparing Hardening Guidelines for IT Assets (Servers, network devices, endpoints, security solutions).• Ensuring AV updating, test patches in UAT setup and implementation in Production.• Conduct Business Impact Assessment (BIA), frame RTO, RPO. For business applications, evaluate the periodic BCP DR Drill operations.• Handling Change Management function(s) for different IT processes, IT Service Management. Show less

Master Of Business Administration - Mba, Banking And Finance

Focused 2 Year ODL Program for proficiency in Finance, Marketing, Strategy & Leadership, Operations, Analytics, HR etc.

Training Programme On Is Audit, Information System Audit

Activities and Societies: On-line Training Programme of IS Audit by National Institute of Bank Management, Pune IS Audit for Core Banking.

Basic Mountaineering Course, Mountaineering, Skills In Rock Craft, Ice Craft, Rope Work, Expedition Planning, Camp Craft Etc., A

Basic Mountaineering Course, offers orientation and skills in rock craft, ice craft, rope work, mountaineering awareness, expedition.

Bachelor Of Technology - Btech, Electronics And Communication Engineering

Caiib, Banking And Finance

Activities and Societies: The Certified Associate of India Institute of Bankers (CAIIB) is conducted by the Indian Institue of Banking.