Vikram A. Email & Phone Number

As a new software in the region, my primary role is to build the Go To Market (GTM) strategy for the region, this includes designing and configuring key solutions that fit the market requirements, identifying partnership channels and enabling them to take the solution to the market, identifying industry or geographies to focus and finally building pricing model that suits the marketAs part of strategy, I also bring unique capabilities of how we combine the two unique solutions ( exchange and workflow) and design as well as build innovative solution offerings which address the key market and regulatory requirements.In addition to strategy, the focus is to protect and grow the existing customer base of CyberGRX post acquisition. Toward this end my focus is to assist existing customers to assist in how they can mature from current GRX solution and expand beyond exchange to full lifecycle workflow capabilitiesFinally, I continue to be responsible for pre-sales and partner enablement roles to ensure growth in the region.

Interim Leader from Dec 2022 to March 2023. Official Promotion April 2023Leading a Global Team of Solution Engineers who are passionate to help customers pivot to innovative ways of managing third party risk management where data is a central point of focus and how different data sources such as outside-in, demographic information, attested data, etc.can be correlated to provide a unique capability for customer to take a data driven risk decision on third parties at scale. Also leading a team of professional services who build data models and provide key advisory services to meet customer objectives and handle customer operations.

Apac

AchievementsCo-Established APAC region for CyberGRX and scaled the revenue, exchange and customers to 25% in less than 3 yearsSupported Pre-sales and Post -sales and achieved 100% customer retentionRole expanded to manage international regions outside of US and towards that led the team of Solution Engineering and Professional Services function.ROLE Responsible for architecting third party risk management program for clients using a unique and a comprehensive third party risk management platform. The focus is on combining the power of threat intelligence, security ratings, publicly available data sources along with residual risk assessment using the most comprehensive security questionnaire (rated by Gartner) and providing the ability to customers to mine that data at a third party level as well as a portfolio level which helps in taking informed decisions as well as reporting to auditors, regulators and board.

Advising clients on Cybersecurity/ Privacy strategy and supporting implementation of cybersecurity and Privacy transformation programs including adoption of newer technologies like cloud, automation, etc. Played roles of:1. Cybersecurity and Privacy strategic adviser - on Cybersecurity/ Privacy roadmap, governance & operating models, CISO/CPO as a service, risk reporting, KPI/KRI development, threat modelling, identification of critical assets through cyber visualisation solutions2. Security architect and/or process designer - for architecting and implementing tactical solution/ processes on DLP, threat intelligence, incident management and crisis readiness, asset management, Cybersecurity/ Privacy by design, business continuity, etc.3. National lead for Third Party Risk Management - assisting clients in designing end-to-end third party lifecycle program (Evaluate, Select, Contract, Ongoing Management and Termination) across multiple risk domains- Cyber, Privacy, Contractual, Operational, Reputation, GeoPolitical, Anti-bribery/ Modern Slavery...etc.); Performing assessments (based on ISO27001, NIST, SIG, privacy requirements, OCC guidelines, shared assessment model, APRA CPS231/234 requirements); implementing passive scanning tools(across risk domains) and utility platforms4. Cybersecurity and Privacy assessor/ auditor- defining testing strategy and conducting cybersecurity/Privacy maturity reviews against ISO27001, PCI DSS, NIST CSF, APRA CPS 234, or Data Privacy(PIA)- Privacy Principles, GDPR, Breach Notifications

Delhi

Worked as Principal Consultant and engaged in areas of Public Advocacy, Thought Leadership and Capacity Building of LEAsEngaged with governments on various deliberation wrt Cloud Computing, ICT Supply Chain Security, Security and Privacy implications in various regulations like IT Act 2000 and its Amendments 2008, EU policy, NIST Frameworks, DoPT Privacy Bill, NIDAI, and was also part of various information security and education programs of government. Was a member of Cyber Security Working Group of India Smart Grid Forum and also represented DSCI in the Open Group Forum. Engaged in the role of thought leadership by promotion of DSCI Security Framework (DSF©) and DSCI Privacy Framework (DPF©) and worked closely in the development of DSCI Assessment Framework - Security/Privacy.Engaged with industry thought leaders through various studies, surveys and thought leadership discussions and have written many position paper on security and privacy.Closely worked with the NASSCOM in initiatives like National Skills Registry (NSR) and NASSCOM Sector Skill Council. Led the DSCI Cyber Lab Initiative by operating 8 cyber labs which are engaged in capacity building of police, prosecutors and judiciary. Led the team in development of Standard operating procedures and standardized training materials. Expanded the operations of the lab to other states and institutions like NICFS, NEPA, NPA, and CBI.

Technology Risk Consulting - Including Information security, IT Service Management, Business Continuity Management and IT Audits. Engaged in various consulting work primarily on Audits and Assurance.

Associated with the Global Consulting Practice of Tata Consultancy Services (TCS) as an Information Risk Management Consultant. Executed different consulting engagements for different clients across the globe primarily in Information Risk Management, Business Continuity, Security Governance and Standards implementation and Audits in ISO 27001, PCI DSS, etc. Areas : Security Strategy Governance Consulting, BCP/DR, PCI DSS, ISO 27001 and Audits

This was a major engagements through TCS where the role was of a business continuity relationship manager-India, Pakistan and Sri-Lanka Managed and Implemented the Business Continuity plans in more than 100 departments under the Bank. Instrumental in building various backup sites, DR sites, conducted drills and simulation exercise for various business units. Setup automated crisis management center in DB India and led the Asia-pacific region in crisis communication.

Mba, It & Marketing

Be, Electronics

School, Science And Maths