Ashish Bisht

Results-driven cybersecurity executive with over 15 years of leadership in designing and securing large-scale infrastructures across fintech, banking, and cloud-native environments. Proven record of aligning security strategies with business outcomes, regulatory mandates (PCI DSS, ISO 27001, SOC-2 Type-2 RBI), and modern risk management. Expert in Zero Trust frameworks, cloud security (AWS), DevSecOps, SOC/SIEM, and third-party/vendor governance.

Recognized for transforming security postures, leading award-winning projects, and building high-performing cross-functional security teams.

Head of Security | Senior Information Security Officer (SISO) at ICC Loyalty (2024-05 – Present)

• Spearheaded cybersecurity vision and strategy, aligning with business growth, regulatory requirements, and executive risk appetite.
• Designed and implemented a Zero Trust security architecture across all cloud and on-prem environments, integrating identity, segmentation, and encryption.
• Migrated infrastructure to AWS with hardened IAM policies, automated logging, and continuous compliance controls.
• Deployed EDR and SOAR platforms, reducing mean time to detect/respond (MTTD/MTTR) by over 50%.
• Established enterprise-wide automated patch management aligned with CVE SLAs, ensuring 95% patch compliance.
• Conducted vendor due diligence and implemented a formal third-party risk management (TPRM) program with annual security assessments and audits.
• Drove successful audits for PCI DSS, ISO 27001 and SOC 2 guidelines with zero major non-conformities.
• Reported security KPIs and incidents to board-level leadership; led risk reporting and awareness campaigns across departments.
• Directed BCP/DR programs with testing cycles across cloud workloads and critical business services.

DevOps Manager – Security & Infrastructure at Paytm (One97 Communications Ltd) (2011-05 – 2023-10)

• Led cybersecurity strategy for Paytm's digital ecosystem, securing infrastructure, applications, data, and customer touchpoints across multiple platforms.
• Embedded DevSecOps practices into CI/CD pipelines, implementing shift-left security with static and dynamic scans, IAM integration, and automated compliance guardrails.
• Built and managed a 24x7 Security Operations Center (SOC) featuring real-time alerting, threat intelligence, and playbook-driven incident response using SIEM and SOAR tools.
• Implemented granular IAM frameworks with role- and attribute-based access controls, reducing privilege misuse and enhancing audit transparency.
• Developed custom in-house security tools including a CMDB and monitoring dashboards to improve detection and visibility across systems.
• Led offensive security initiatives, such as malware simulation, red-teaming, and attack surface mapping, significantly strengthening EDR posture.
• Delivered end-to-end security architecture for HPCL's infrastructure, successfully winning the RFP and earning the Rockstar Award in 2021.
• Designed and deployed Paytm Money's trading infrastructure, integrating NSE/BSE low-latency broadcast feeds using a hybrid model.
• Automated infrastructure provisioning using Terraform and CloudFormation, reducing manual errors and improving environment consistency.
• Championed disaster recovery frameworks, meeting stringent RTO and RPO benchmarks for regulated fintech workloads.

System Administrator at MotherSumi Infotech & Design Ltd (MIND) (2009-08 – 2011-05)

• Administered Windows/Linux systems, backups, user access, and endpoint protection.
• Maintained firewalls, IPS/IDS, and performed systems patching and compliance updates.
• Created SLA-based infrastructure documentation and network diagrams.

MCA in Master of Computer Applications – Subharti University

Graduation – Delhi University