Abhijeet Mali

Cybersecurity professional with over 12 years of experience in technology risk management and cybersecurity strategy, expert in AWS Cloud Solutions and vulnerability assessments. Key achievements include increasing operational efficiency by implementing risk monitoring systems, leading to a 40% improvement, and reducing time-to-market by 35% through optimizing deployment processes with AWS tools. Seeking a Technology Risk & Control Oversight position at Principal Global Finance, where I bring my risk management and cybersecurity strategy skills to support your mission of leading and overseeing the planning and execution of emerging technology risk assessments.

Senior Security Architect - Principal Global Services

(2020-09)

Partnered with IT teams to mitigate technology-related risks, safeguarding digital assets and ensuring robust infrastructure security. Spearheaded vendor risk management initiatives, assessing third-party security controls to protect sensitive data effectively. Designed and implemented automated systems for risk monitoring, significantly improving accuracy and operational efficiency.

Conducted financial due diligence and risk analysis on potential investments and acquisitions, ensuring sound decision-making. Streamlined deployment processes using AWS CodePipeline and CodeDeploy, reducing time-to-market for new features and enhancing scalability. Developed comprehensive disaster recovery strategies using AWS tools, ensuring seamless failover capabilities & minimizing data loss.

Enhanced team performance through consistent feedback, coaching, and training, driving measurable improvements in productivity. Led penetration testing exercises, identifying vulnerabilities in current defenses and implementing effective remediation strategies to reduce cyber threats.

• Mitigated technology-related risks by partnering with 4 IT teams, safeguarding digital assets and reinforcing infrastructure security.
• Implemented automated risk monitoring systems increasing accuracy by 30% and operational efficiency for 3 core risk domains.
• Spearheaded vendor risk management, assessing security controls of 15 third-party vendors to protect sensitive data and reduce breach risks.
• Streamlined deployment with AWS CodePipeline and CodeDeploy, reducing release cycle time by 25% and enhancing scalability for 5 applications.
• Increased team productivity by 20% through targeted coaching and training for 8 security professionals.
• Developed disaster recovery strategies using AWS tools, achieving 99.9% failover reliability and minimizing data loss across 3 critical systems.
• Conducted financial due diligence on 10+ investments and acquisitions, ensuring sound decisions with detailed risk analysis.
• Led 12 penetration testing exercises, identifying vulnerabilities and reducing cyber threats by implementing effective remediation plans.

Cyber Security Compliance Analyst - Studio Retail UK

(2019-06 - 2020-01)

Conducted internal compliance audits to assess security controls and ensure adherence to policies and frameworks, maintaining organizational integrity. Developed and maintained a comprehensive cybersecurity dashboard and metrics, providing an accurate risk profile and insights into emerging cyber threats. Proactively identified and assessed risks from policy gaps and non-conformances, implementing corrective measures to mitigate exceptions effectively.

Collaborated with stakeholders across IT and business units to document and address risks, ensuring alignment with compliance and governance standards. Oversaw the creation and distribution of cyber security KPIs, enhancing visibility into security performance and risk management practices. Ensured audit readiness and adherence to schedules by gathering, evaluating, and preparing evidence for second-line reviews.

Established and revised control systems to highlight, prevent, and address exceptions, driving continuous improvement in compliance processes. Delivered a secure and reliable service by upholding regulatory, quality, and security standards, safeguarding organizational operations and reputation.

Senior Associate - Cognizant Technology Solution

(2016-03 - 2019-01)

• Designed and developed a robust ISMS control framework aligned with ISO 27001 and ISO 31000 standards to enhance organizational information security management
• Conducted comprehensive security design reviews to ensure alignment with ISO 27001 requirements, bolstering system resilience and compliance
• Reviewed and updated IT security policies, business continuity frameworks, and risk assessment methodologies to reflect ISO 27001 standards
• Supported client audits across multiple standards, including ISO 27001, SSA16/18, HIPAA, and PCI DSS, ensuring compliance and audit readiness
• Performed technical risk assessments for new applications and associated information security assets to identify vulnerabilities and mitigate risks
• Conducted vendor risk assessments to evaluate third-party compliance with security policies and minimize supply chain vulnerabilities
• Executed vulnerability assessments and penetration testing on internal applications, networks, and servers, identifying and addressing potential security gaps
• Reviewed network architecture and configurations, including databases and systems, to optimize security and prevent potential breaches

IT Security Consultant - Triogensys Pvt. Ltd

(2014-09 - 2016-04)

• Conducted vendor risk assessments to evaluate third-party compliance, ensuring alignment with organizational security standards and mitigating supply chain vulnerabilities
• Assessed the adequacy of controls, standards, policies, and procedures, ensuring regulatory compliance and effective risk mitigation
• Supported business lines by identifying and managing technology and information risks, proactively addressing potential threats to operational efficiency
• Performed operational risk assessments based on key controls, such as change management, incident management, security monitoring, patch management, and identity and access management (IAM)
• Reviewed IT security policies, business continuity frameworks, and risk assessment frameworks to ensure they were up-to-date and aligned with industry best practices
• Evaluated ISMS frameworks (ISO 27001), data center and disaster recovery site reviews, network architecture, security operations center (SOC) processes, and network monitoring software for compliance and operational effectiveness
• Audited process management in areas such as incident and helpdesk management, change management, SLA management, backup procedures, and patch management, ensuring smooth and secure operations
• Conducted in-depth reviews of network configurations, operating systems, and databases to identify vulnerabilities, while ensuring optimal network security and redundancy through strategic design, including the placement of firewalls and web application firewalls

Senior Administration - Decos Software Pvt. Ltd

(2013-01 - 2014-09)

• Managed the implementation and ongoing administration of the Information Security Management System (ISMS), ensuring alignment with ISO 27001 standards for robust information security governance
• Conducted comprehensive information security audits based on ISO 27001, evaluating the organization's security posture and identifying areas for improvement
• Assessed the adequacy of controls, standards, policies, and procedures to ensure strict compliance with regulatory requirements, mitigating potential legal and operational risks
• Performed technical risk assessments for new applications and corresponding information security assets, proactively identifying and addressing vulnerabilities before deployment
• Led vulnerability assessments and penetration testing for internal systems, including applications, networks, and servers, to uncover security weaknesses and develop remediation strategies for enhanced protection

IT Lab Administrator - Courion IT Pvt. Ltd

(2011-09 - 2012-09)

Senior Network Administration - Tata Communication Pvt. Ltd

(2011-09 - 2009-03)

Bachelor of Engineering - Pune University