Responsible for Information Security and data privacy program management, Overseeing Risk Assessment and audits (Security and Privacy), Security strategy and advisory, privacy compliance efforts and client wins for global operations of WNS. Role revolves around transformation of privacy program to align it with GDPR requirements, to assess, review and strengthen the existing privacy controls, ensuring transparency with respect to processing activities to all categories of data subjects (Employee, Applicants, Third party staff, Supplier staff,client staff, Visitors, Web site visitors, prospect customers etc)..working with various business units and legal to ensure privacy is well integrated into organisation DNA.• Revise and update Privacy framework, policies, procedures and establishing guidelines• Setting up a data discovery program for exposure to personal data, • Inventory of personal data in processes and systems, • Data flow mapping of organization processes• Establishing criterions for determining legal grounds of processing • Identifying purpose of processing and documenting Records of processing inventories• Determining criterions for Legitimate Interest Assessment (LIA) and Privacy Impact Assessment (PIA)• Establishing the privacy notices and consent framework• Developing the privacy accountability procedures• Website privacy management• Revamping remarketing and directing marketing in compliance with GDPR• Vendor program management including contract revision with large listing of client, vendors and sub processors• Driving general GDPR training and awareness campaigns for its staff and customized trainings and workshop for technical staff (IT and Application development)• Revisiting recruitment practices• Driving enhancement of 250+ existing business applications (in-house and third party) for compliance with Data subject rights and privacy by design• Driving technology changes to provide baseline privacy protections for Personal data

Leading Risk Assessment Program Leading Org wide IS risk assessment program covering 150+ Clients. Successfully driven large scale change within WNS & client operating environments  Responsible for managing risks during transition Providing Monthly updates to BU leadership on progress of risk assessmentLeading IS Presales & Advisory efforts  Leading InfoSec presales activities for potential opportunities, RFP support, Review of MSA/ SOWs/ Security & privacy exhibits for advice to business on RED Flags. Has worked on 250+ deals across verticals Managing IS program mgmt & audit support Developing IS & Privacy policy and technical procedures Has managed multiple cycles of o Certifications (ISO 27001, PCI DSS) for India & intl delivery centres o Attestation engagement audits of SSAE 16 SOC 1(Type I /Type II), SOC 2 Type IIo Specific audit engagements for client operating environment (BITS FISAP AUP)o Internal IS audits for IT, HR, Physical security Facilitating due diligence visits, assessment & audits by clients Leading Org wide privacy efforts Designed & rolled out org wide privacy policy Planning & Implementation of privacy program management, carried out PIA for IT Rules, 2011 & HIPAA Launch of first privacy awareness week, roll out of generic & sectorial privacy training program / privacy commandments  Monitoring compliance with Intl regulations HIPPA / HITECH, DPA,PIPEDA, Aus NPP, IT rules, 2011Improving compliance framework  Ensuring ongoing contractual & regulatory compliance Rolled Org wide UCF for improved, unified reporting on multiple compliance requirements Developed Balanced scorecards & maturity indicators for control areasSupporting BCP & DR Planning recovery for top 50 clients as revenue protection strategy, developed DR plans for locations & clients Realignment of wide area net for route diversity (Sea cable routes), Core-satellite site segregation

Fidelity India IT Security - Threat ManagementAt Fidelity, was responsible for IT Security - Threat management function responsible for security threat modeling, development of early predictive threat model for external and Internal threats, Vulnerability and Risk Management, database security assessments, Wireless Security, Operation and managing of Server patching cycle, Security Event analysis for developing long term Risk Mitigation Strategy for entire Fidelity Enterprise and other group companies situated across the globe such as FISC Mumbai , FMR Gurgaon, HRAccess Germany & France, FIL & FMR ( Hong Kong ,Japan, Taiwan, Bermuda ,Ireland, UK).

Worked as Senior Engineer (IT-Communications), Level Asst Manager E-3, with National Thermal Power Corporation Ltd (A Govt. of India Enterprise) reporting to Head - Technical servicesWas responsible for • Planning & designing enterprise data and voice network • Installation of VSAT based data and voice network in FY 1999-2000, connecting to NTPC’ own satellite earth station (CSES, Murad Nagar)• Ensure upkeep and maintain voice and data network over VSAT link to 99% • Securing the data and voice network by architecting security design, designing of templates for security testing of key internetworking devices, secure configuration of devices• Provided assistance in building up security policies to GM (IT & Communication)• Vulnerability and Risk Assessment of corporate data network / penetration testing, preparing detailed report of newly discovered vulnerabilities and potential threats for organization, analysis of threats• First to roll out secured wireless implementation within NTPC at its Faridabad Project